]> git.koha-community.org Git - koha.git/commit
Bug 37323: Don't allow symlinks in link files in zip and validate filepaths
authorChris Cormack <chris@bigballofwax.co.nz>
Thu, 18 Jul 2024 23:57:32 +0000 (23:57 +0000)
committerKatrin Fischer <katrin.fischer@bsz-bw.de>
Fri, 16 Aug 2024 14:22:20 +0000 (16:22 +0200)
commitd8697314cd7650e28dbfe8890bc7155650f294f1
treef22e366255855ca01b05338a9ebdb13d7e400f33
parent50968f4c3fec1d29a4b9980a355457e80fb5dbed
Bug 37323: Don't allow symlinks in link files in zip and validate filepaths

Test plan:
0. Apply patch and restart/reload Koha
1. Test that uploading a patron image still works, in single file format and as a zip

Work as suggested

Signed-off-by: Amit Gupta <amit.gupta@informaticsglobal.com>
Signed-off-by: David Cook <dcook@prosentient.com.au>
Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
(cherry picked from commit 9bc0521493fbe2f9fe0dde051d0b2f52c8a14a9a)
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
tools/picture-upload.pl