From dace479c827f5dc907a846c35b493156628ad493 Mon Sep 17 00:00:00 2001 From: Darian Anthony Patrick Date: Wed, 12 Aug 2015 12:47:36 -0700 Subject: [PATCH] Avoid exposure of local path in PNG thumbnails Bug: T108616 Change-Id: I952068d2d175d71f86dec0dbb92af5a122c05a49 --- includes/media/Bitmap.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/includes/media/Bitmap.php b/includes/media/Bitmap.php index 4be20b2..1d7ef2d 100644 --- a/includes/media/Bitmap.php +++ b/includes/media/Bitmap.php @@ -162,6 +162,8 @@ class BitmapHandler extends TransformationalImageHandler { ( $params['comment'] !== '' ? array( '-set', 'comment', $this->escapeMagickProperty( $params['comment'] ) ) : array() ), + // T108616: Avoid exposure of local file path + array( '+set', 'Thumb::URI'), array( '-depth', 8 ), $sharpen, array( '-rotate', "-$rotation" ), -- 2.3.2 (Apple Git-55)