Merge branch 'MDL-72242-master-svgforcedfilter' of git://github.com/mudrd8mz/moodle
This commit is contained in:
+1
-2
@@ -2535,10 +2535,9 @@ function send_file($path, $filename, $lifetime = null , $filter=0, $pathisstring
|
||||
$filename = rawurlencode($filename);
|
||||
}
|
||||
|
||||
// We need to force download and force filter the file content for the SVG file.
|
||||
// Make sure we force download of SVG files for security reasons (https://digi.ninja/blog/svg_xss.php).
|
||||
if (file_is_svg_image_from_mimetype($mimetype)) {
|
||||
$forcedownload = true;
|
||||
$filter = 1;
|
||||
}
|
||||
|
||||
if ($forcedownload) {
|
||||
|
||||
Reference in New Issue
Block a user