smarty-php/smarty
1
0
Fork 0
mirror of https://github.com/smarty-php/smarty.git synced 2025-08-05 10:54:27 +02:00
Code Issues Packages Projects Releases Wiki Activity

- bugfix {html_image} security check did fail on files relative to basedir (Issue 191)

Browse Source
This commit is contained in:
Uwe.Tews@googlemail.com
2014-06-08 19:03:39 +00:00
parent 7ca939f47b
commit 0e1f7fdcfc
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
change_log.txt
View File

@@ -3,6 +3,7 @@
- bugfix registered objects did not work after spelling fixes of 06.06.2014 - bugfix registered objects did not work after spelling fixes of 06.06.2014
- bugfix {block} tags within {literal} .. {/literal} got not displayed correctly (topic 25024) - bugfix {block} tags within {literal} .. {/literal} got not displayed correctly (topic 25024)
- bugfix UNC WINDOWS PATH like "\\psf\path\to\dir" did not work as template directory (Issue 192) - bugfix UNC WINDOWS PATH like "\\psf\path\to\dir" did not work as template directory (Issue 192)
- bugfix {html_image} security check did fail on files relative to basedir (Issue 191)
06.06.2014 06.06.2014
- fixed PHPUnit outputFilterTrimWhitespaceTests.php assertion of test result - fixed PHPUnit outputFilterTrimWhitespaceTests.php assertion of test result

2
libs/plugins/function.html_image.php
View File

@@ -114,7 +114,7 @@ function smarty_function_html_image($params, $template)
} }
} else { } else {
// local file // local file
if (!$template->smarty->security_policy->isTrustedResourceDir($params['file'])) { if (!$template->smarty->security_policy->isTrustedResourceDir($_image_path)) {
return; return;
} }
} }