AS1024/Kanboard-Prod
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Limit avatar image size

Browse Source 
fixes #4041
This commit is contained in:
Frédéric Guillot
2019-02-01 12:12:36 -08:00
parent 6c421da47a
commit fa08493348
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/Controller/AvatarFileController.php
View File

@@ -59,6 +59,12 @@ class AvatarFileController extends BaseController
{ {
$user_id = $this->request->getIntegerParam('user_id'); $user_id = $this->request->getIntegerParam('user_id');
$size = $this->request->getStringParam('size', 48); $size = $this->request->getStringParam('size', 48);
if ($size > 100) {
$this->response->status(400);
return;
}
$filename = $this->avatarFileModel->getFilename($user_id); $filename = $this->avatarFileModel->getFilename($user_id);
$etag = md5($filename.$size); $etag = md5($filename.$size);