From 80f7dc77d430774192b929d780f96260066df2ee Mon Sep 17 00:00:00 2001 From: Pierre Schmitz Date: Sun, 18 Oct 2015 09:31:31 +0200 Subject: Update to MediaWiki 1.25.3 --- includes/media/Bitmap.php | 2 ++ 1 file changed, 2 insertions(+) (limited to 'includes/media/Bitmap.php') diff --git a/includes/media/Bitmap.php b/includes/media/Bitmap.php index eadcf94b..3b1d978e 100644 --- a/includes/media/Bitmap.php +++ b/includes/media/Bitmap.php @@ -162,6 +162,8 @@ class BitmapHandler extends TransformationalImageHandler { ( $params['comment'] !== '' ? array( '-set', 'comment', $this->escapeMagickProperty( $params['comment'] ) ) : array() ), + // T108616: Avoid exposure of local file path + array( '+set', 'Thumb::URI'), array( '-depth', 8 ), $sharpen, array( '-rotate', "-$rotation" ), -- cgit v1.2.2