snipe e71e57f16a Fixed XSS vulnerability in SVG image uploads [ch10476] (#7639) ...

* Added enshrined/svg-sanitize

* Added modular image resizing/SVG cleaning method

(This already exists in v5, so I mostly ported it forward and added the SVG sanitizer.)

* Use improved handleImages method to upload/resize/clean images

* Removed $old_image

This is handled in the ImageUpload request now

2019-12-05 22:23:05 -08:00

36 KiB

Executable File

Raw Blame History

View Raw