Validate custom dashboard background image

Signed-off-by: Christopher Ng <chrng8@gmail.com>

diff --git a/apps/dashboard/lib/Service/BackgroundService.php b/apps/dashboard/lib/Service/BackgroundService.php
index 13ad03cf860d938e6eb5067c822512bb156ee49b..c98b92412cbb551f3099f53c3943a1ed07d6095a 100644 (file)
--- a/apps/dashboard/lib/Service/BackgroundService.php
+++ b/apps/dashboard/lib/Service/BackgroundService.php
@@ -150,6 +150,10 @@ class BackgroundService {
                $userFolder = $this->rootFolder->getUserFolder($this->userId);
                /** @var File $file */
                $file = $userFolder->get($path);
+               $image = new \OCP\Image();
+               if ($image->loadFromFileHandle($file->fopen('r')) === false) {
+                       throw new InvalidArgumentException('Invalid image file');
+               }
                $this->getAppDataFolder()->newFile('background.jpg', $file->fopen('r'));
        }