Koha-clms/tools
David Cook 478c7aae22
Bug 37488: Validate paths in datalink.txt/idlink.txt files
This change validates the paths in datalink.txt/idlink.txt,
so that only images in the unpacked archive directory are allowed

Test plan:
0. Apply the patch
1. koha-plack --reload kohadev
2. Create a datalink.txt file with the following:
42,selfie.jpg
3. Create a jpeg at selfie.jpg
4. ZIP the datalink.txt and selfie.jpg files
5. Upload to the "Upload patron images" tool
(after enabling the "patronimages" system preference)
6. Note that the image uploads correctly

Signed-off-by: Nick Clemens <nick@bywatersolutions.com>

Signed-off-by: Marcel de Rooy <m.de.rooy@rijksmuseum.nl>
Signed-off-by: Tomas Cohen Arazi <tomascohen@theke.io>
2024-08-13 11:53:58 -03:00
..
csv-profiles
…
access_files.pl Bug 33341: Address some perlcritic errors in 5.36 2023-04-11 10:54:27 +00:00
additional-contents.pl Bug 34368: Add CSRF token to Content Management pages 2023-07-28 11:14:21 +00:00
ajax-inventory.pl
…
automatic_item_modification_by_age.pl Bug 22827: Add age dependency on other fields than dateaccessioned 2022-04-08 15:49:16 +02:00
background-job-progress.pl Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
batchMod.pl Bug 34257: (QA follow-up): tidy up code 2023-09-15 10:19:54 +00:00
batch_delete_records.pl Bug 29697: Replace GetMarcBiblio occurrences with $biblio->metadata->record 2022-07-22 15:24:11 -03:00
batch_extend_due_dates.pl Bug 30718: Use flatpickr's altInput 2022-08-19 08:26:31 -03:00
batch_record_modification.pl Bug 29771: Scalar context for split 2022-03-08 23:03:34 -10:00
batch_records_ajax.pl Bug 22785: Allow option to choose which record match is applied during import 2022-05-03 11:19:50 -10:00
cleanborrowers.pl Bug 30718: Use flatpickr's altInput 2022-08-19 08:26:31 -03:00
copy-holidays.pl
…
csv-profiles.pl
…
exceptionHolidays.pl Bug 33667: Allow copying holidays to all libraries when editing 2023-07-18 13:32:49 +00:00
export.pl Bug 6936: Allow multiple itemtypes for bib record export 2022-08-22 13:34:38 -03:00
holidays.pl Bug 30718: Use flatpickr's altInput 2022-08-19 08:26:31 -03:00
import_borrowers.pl Bug 27920: (QA follow-up) Change radios to a single select pulldown 2022-11-09 14:37:24 -03:00
inventory.pl Bug 22135: Display 'shelved out of order' error in inventory CSV export 2023-09-15 09:33:08 +00:00
letter.pl Bug 32221: Borrowers.password should no longer be an option 2023-01-31 14:08:31 +00:00
manage-marc-import.pl Bug 33412: Fix comparison when checking for overlay framework 2023-05-15 10:35:22 +00:00
marc_modification_templates.pl
…
modborrowers.pl Bug 31095: (follow-up) Iterate debarments in batch mod 2023-02-01 15:40:10 +00:00
newHolidays.pl
…
overduerules.pl Bug 29844: Fix ->search occurrences 2022-02-09 15:36:23 -10:00
page.pl Bug 31385: (follow-up) Same change at intranet side 2022-08-19 11:43:56 -03:00
picture-upload.pl Bug 37488: Validate paths in datalink.txt/idlink.txt files 2024-08-13 11:53:58 -03:00
problem-reports.pl
…
quotes-upload.pl
…
quotes.pl
…
scheduler.pl Bug 34349: Validate/escape inputs for task scheduler 2023-09-28 09:18:29 +00:00
showdiffmarc.pl Bug 31526: Follow-up for bug 29697 2022-09-16 10:25:48 -03:00
stage-marc-import.pl Bug 33755: Set profile_id and add missing import 2023-08-18 13:50:43 +00:00
stockrotation.pl Bug 30869: Add the ability to delete stock rotation rotas 2023-03-01 15:32:49 +00:00
tools-home.pl Bug 33595: (bug 26628 follow-up) Fix authorization for tools-home.pl 2023-06-07 10:16:07 +00:00
upload-cover-image.pl Bug 35291: (QA follow-up) Tidying script for QA test tools 2023-11-28 14:14:18 +00:00
upload-file.pl Bug 28785: Adjust check_cookie_auth calls 2021-10-18 11:28:41 +02:00
upload.pl
…
viewlog.pl Bug 32037: Check for existence of object before building link 2022-11-04 19:18:54 -03:00