DRCIT/snipe-it
1
0
Fork 0
mirror of https://github.com/snipe/snipe-it.git synced 2025-01-24 12:17:05 -08:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity
snipe-it/app/Http/Requests
History
snipe e71e57f16a
Fixed XSS vulnerability in SVG image uploads [ch10476] (#7639) 
* Added enshrined/svg-sanitize

* Added modular image resizing/SVG cleaning method

(This already exists in v5, so I mostly ported it forward and added the SVG sanitizer.)

* Use improved handleImages method to upload/resize/clean images

* Removed $old_image

This is handled in the ImageUpload request now
2019-12-05 22:23:05 -08:00
..
AssetCheckinRequest.php
AssetCheckoutRequest.php
AssetFileRequest.php
AssetRequest.php Fixes #7252 form request changes (#7272) 2019-07-18 14:32:23 -07:00
CustomFieldRequest.php
ImageUploadRequest.php Fixed XSS vulnerability in SVG image uploads [ch10476] (#7639) 2019-12-05 22:23:05 -08:00
ItemImportRequest.php
Request.php
SaveUserRequest.php Fixes #7252 form request changes (#7272) 2019-07-18 14:32:23 -07:00
SettingsLdapRequest.php
SetupUserRequest.php