]> git.koha-community.org Git - koha.git/commit
Bug 37488: Validate paths in datalink.txt/idlink.txt files
authorDavid Cook <dcook@prosentient.com.au>
Fri, 26 Jul 2024 04:01:43 +0000 (04:01 +0000)
committerKatrin Fischer <katrin.fischer@bsz-bw.de>
Fri, 16 Aug 2024 14:22:21 +0000 (16:22 +0200)
commit751e72dfda14ec6b608b0bab2265935483301bf8
tree7b514b83c99584b333821622086448084e332c93
parent4e7f850c59ec171f28bec83164ef8ec1dec202ec
Bug 37488: Validate paths in datalink.txt/idlink.txt files

This change validates the paths in datalink.txt/idlink.txt,
so that only images in the unpacked archive directory are allowed

Test plan:
0. Apply the patch
1. koha-plack --reload kohadev
2. Create a datalink.txt file with the following:
42,selfie.jpg
3. Create a jpeg at selfie.jpg
4. ZIP the datalink.txt and selfie.jpg files
5. Upload to the "Upload patron images" tool
(after enabling the "patronimages" system preference)
6. Note that the image uploads correctly

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
(cherry picked from commit 8fcb767fe2836c90ceacb5b5d8211524571eb8aa)
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
Signed-off-by: Katrin Fischer <katrin.fischer@bsz-bw.de>
tools/picture-upload.pl