Commit Graph

17 Commits

Author SHA1 Message Date
Ben Thomson 50e61df10e
Fix path validation for CmsObjects & Assets (#5229)
Instead of using a temporary file to allow checks with `realpath()` to succeed, use the new `resolve_path()` helper added in a9a629b012 to replace the `realpath()` usage and allow for path resolution of files that don't exist yet.

This will allow new asset files to still be saved correctly, whilst still preventing paths outside of the assets directory to be used.

Replaces b1954e9258.
2020-08-05 12:00:22 -06:00
Luke Towers b1954e9258 Fix creating asset files
Fixes #5228
2020-07-30 10:35:02 -06:00
Luke Towers 2b8939cc8b Improve asset file path handling 2020-03-31 03:37:31 -06:00
Ben Thomson a59d3b83eb Code quality clean up (#4449)
Credit to @bennothommo
2019-07-18 08:50:37 -06:00
Teranode 82a38bdfb6 Add ability to delete asset files (#3933)
Fixes: #3925. Credit to @Teranode
2018-11-28 11:08:39 -06:00
Nathan van der Werf 0f0d108da0
Remove unused imports 2018-08-24 19:51:59 +02:00
Nathan van der Werf 66fa03f17e
Revert "Remove unused imports"
This reverts commit 742a5f415b.
2018-08-24 19:40:40 +02:00
Nathan van der Werf 3a918ad200 Remove "null" assignments 2018-08-15 18:33:24 +02:00
Nathan van der Werf 742a5f415b Remove unused imports 2018-08-15 18:27:36 +02:00
Arthur Kushman bbc33710c1 >= PHP7.0 refactoring (#3343)
* Fix loosly comparison to strict + argument types and return types for >=7.0
* Change hard-coded strings to ::class, 
* Fix unit-tests failures - some relative to 7.0 phpunit env deployment
* Fix exception string + format return types
* Change string representation of new classes in traceLog to ::class
Credit to @arthurkushman
2018-01-12 00:23:20 -06:00
Samuel Georges 433cf1d504 Additional security fixes 2017-04-10 16:02:05 +10:00
Szabó Gergő d7f1d523f0 Translate some strings (#2395)
* Translate some strings
2016-10-11 08:29:26 +11:00
Samuel Georges 7f209d2df9 Bring Asset in line with inTheme 2016-03-17 19:28:29 +11:00
Samuel Georges 1bc647f978 Decouple Asset object
Add extensible to ComponentPartial
2016-03-12 10:17:07 +11:00
Stefan Talen 202e8869b1 Updating modules/cms/classes 2014-10-11 01:22:03 +02:00
Sam Georges 30d29eb5f7 Minor 2014-06-13 20:09:06 +10:00
Sam Georges 71a5dd67ab Welcome to the world, October :-) 2014-05-14 23:24:20 +10:00