ORIENT/modules/cms
Ben Thomson 50e61df10e
Fix path validation for CmsObjects & Assets (#5229)
Instead of using a temporary file to allow checks with `realpath()` to succeed, use the new `resolve_path()` helper added in a9a629b012 to replace the `realpath()` usage and allow for path resolution of files that don't exist yet.

This will allow new asset files to still be saved correctly, whilst still preventing paths outside of the assets directory to be used.

Replaces b1954e9258.
2020-08-05 12:00:22 -06:00
..
assets Add support for "soft" components (#4539) 2020-04-05 01:02:43 +08:00
classes Fix path validation for CmsObjects & Assets (#5229) 2020-08-05 12:00:22 -06:00
components Add support for "soft" components (#4539) 2020-04-05 01:02:43 +08:00
contracts Code quality clean up (#4449) 2019-07-18 08:50:37 -06:00
controllers Use the Lang facade rather than the trans helper function 2020-06-28 11:14:35 -06:00
database/migrations cms_theme_contents -> cms_theme_templates 2019-06-01 12:45:29 +10:00
facades Code dusting (#2826) 2017-04-24 21:38:19 +10:00
formwidgets Add support for "soft" components (#4539) 2020-04-05 01:02:43 +08:00
helpers Rollback for Build 462 2019-12-19 17:42:25 +11:00
lang Add missing French translations (#5210) 2020-07-16 16:42:28 +08:00
models Match save method signature in Theme Export/Import 2019-09-05 10:58:22 +08:00
reportwidgets Improve linking from ActiveTheme report widget with permissions (#3869) 2018-10-16 09:11:14 -06:00
traits Changed calls to the Cache to use DateTime instances instead of integers representing minutes as 5.8 changed integers into meaning seconds instead. 2019-06-12 02:33:26 -06:00
twig Replace Illuminate Dumper with Symfony Dumper (#4998) 2020-03-24 11:51:27 -06:00
views Change the lang code in the html templates (#3754) 2018-09-04 11:54:26 -06:00
widgets Support new onUpload() AJAX handler for uploads instead of postback takeovers. 2020-06-05 16:01:22 -06:00
ServiceProvider.php Finish theme:sync command (#4276) 2019-04-19 09:07:48 -06:00
composer.json Add L6 as a dep to the modules to prevent people with older Laravel versions from accidentally pulling in the L6 update 2020-07-19 01:42:58 -06:00
routes.php Make slug route param optional for CMS module. 2020-01-19 23:23:27 +08:00