]> git.koha-community.org Git - koha.git/commit
Bug 37488: Validate paths in datalink.txt/idlink.txt files
authorDavid Cook <dcook@prosentient.com.au>
Fri, 26 Jul 2024 04:01:43 +0000 (04:01 +0000)
committerTomas Cohen Arazi <tomascohen@theke.io>
Mon, 12 Aug 2024 18:35:09 +0000 (15:35 -0300)
commit838de7c597ed06e333817add4eae9fc8b9a7d27b
tree08343f3484abda86a162b2b0b228c1539733609c
parent8c948ee349f125b6c79378a6cdbd6c1b0416a5a5
Bug 37488: Validate paths in datalink.txt/idlink.txt files

This change validates the paths in datalink.txt/idlink.txt,
so that only images in the unpacked archive directory are allowed

Test plan:
0. Apply the patch
1. koha-plack --reload kohadev
2. Create a datalink.txt file with the following:
42,selfie.jpg
3. Create a jpeg at selfie.jpg
4. ZIP the datalink.txt and selfie.jpg files
5. Upload to the "Upload patron images" tool
(after enabling the "patronimages" system preference)
6. Note that the image uploads correctly

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>
Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
(cherry picked from commit 8fcb767fe2836c90ceacb5b5d8211524571eb8aa)
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
tools/picture-upload.pl