]> git.koha-community.org Git - koha.git/commit
Bug 37488: Validate paths in datalink.txt/idlink.txt files
authorDavid Cook <dcook@prosentient.com.au>
Fri, 26 Jul 2024 04:01:43 +0000 (04:01 +0000)
committerTomas Cohen Arazi <tomascohen@theke.io>
Tue, 13 Aug 2024 05:03:20 +0000 (02:03 -0300)
commitfd1d295e6170eead8028fd850427a0635f873e97
tree42dd9787ee7df414143d2412ef0f586968dedb59
parent135b9d20bf0df642056abb50f8dbbef975fe5ad5
Bug 37488: Validate paths in datalink.txt/idlink.txt files

This change validates the paths in datalink.txt/idlink.txt,
so that only images in the unpacked archive directory are allowed

Test plan:
0. Apply the patch
1. koha-plack --reload kohadev
2. Create a datalink.txt file with the following:
42,selfie.jpg
3. Create a jpeg at selfie.jpg
4. ZIP the datalink.txt and selfie.jpg files
5. Upload to the "Upload patron images" tool
(after enabling the "patronimages" system preference)
6. Note that the image uploads correctly

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
tools/picture-upload.pl