mirror of
https://github.com/BookStackApp/BookStack.git
synced 2024-08-26 04:05:57 +00:00
![]() This filters out potentially malicious javascript: or data: uri's coming through to be attached to attachments. Added tests to cover. Thanks to Yassine ABOUKIR (@yassineaboukir on twitter) for reporting this vulnerability. |
||
---|---|---|
.. | ||
Attachment.php | ||
AttachmentService.php | ||
HttpFetcher.php | ||
Image.php | ||
ImageRepo.php | ||
ImageService.php | ||
UploadService.php |