• last updated 10 hours ago
Constraints
Constraints: committers
 
Constraints: files
Constraints: dates
Improved consistency with external programs

Since "unzip" is used as well on various other places,

use it as well in the file storage. This means that

the parameter "UnzipBinary" for the file-storage package

is now obsolete.

  1. … 1 more file in changeset.
strengthen boolean parameters in page contracts

  1. … 31 more files in changeset.
Improve validation

  1. … 1 more file in changeset.
Make use of new API "ad_mktmpdir" and "ad_opentmpfile" instead of "ad_tmpnam"

  1. … 6 more files in changeset.
Test the behavior of the file-storage when a malicious user would try to store a pre-existing file on the server as its own

The fix for the file-storage is a simple validation to make sure that the tmpfile exists, however, for the generic case of the file widget, we cannot trust the tmpfile value when this was not generated by the server. This will probably cause regression when one wants to show a "preview" of a form, to be continued.

  1. … 2 more files in changeset.
Make use of util::file_content_check and check also in other cases

This change also covers the case, where the checkmark for uploading

zip files was added marked in "upload file". It will also report

errors which were silently swalled before.

Bumped version number to 5.10.1d1

  1. … 2 more files in changeset.
Similar to the folder-create script, complain if the filename turns out empty after sanitizing

Port sanitizing of upload file name from downstream

improve spelling

  1. … 5 more files in changeset.
use "ad_file" as a means to avoid unexpected tilde substitution in file names

  1. … 12 more files in changeset.