diff options
| author | Joas Schilling <213943+nickvergessen@users.noreply.github.com> | 2024-05-16 11:18:11 +0200 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2024-05-16 11:18:11 +0200 |
| commit | ea82b23b3260a8ab50145ecff9887461350cceac (patch) | |
| tree | dc46ac1bd5b69a6481bfe1c9b0a7708627e34bac | |
| parent | 2fdfcbd28d1a13ca34e325e3c581d2406f4855de (diff) | |
| parent | 2e7873623f5ee7e0bad9d586e876d1ac2915bf46 (diff) | |
| download | nextcloud-server-ea82b23b3260a8ab50145ecff9887461350cceac.tar.gz nextcloud-server-ea82b23b3260a8ab50145ecff9887461350cceac.zip | |
Merge pull request #45341 from nextcloud/backport/45340/stable29
[stable29] fix: Extend SVG reference check
| -rw-r--r-- | lib/private/Preview/SVG.php | 2 | ||||
| -rw-r--r-- | tests/lib/Preview/SVGTest.php | 29 |
2 files changed, 30 insertions, 1 deletions
diff --git a/lib/private/Preview/SVG.php b/lib/private/Preview/SVG.php index fd472083533..14bdfc46096 100644 --- a/lib/private/Preview/SVG.php +++ b/lib/private/Preview/SVG.php @@ -53,7 +53,7 @@ class SVG extends ProviderV2 { } // Do not parse SVG files with references - if (stripos($content, 'xlink:href') !== false) { + if (preg_match('/["\s](xlink:)?href\s*=/i', $content)) { return null; } diff --git a/tests/lib/Preview/SVGTest.php b/tests/lib/Preview/SVGTest.php index e48018a301b..07e96eec9ab 100644 --- a/tests/lib/Preview/SVGTest.php +++ b/tests/lib/Preview/SVGTest.php @@ -43,4 +43,33 @@ class SVGTest extends Provider { $this->markTestSkipped('No SVG provider present'); } } + + public function dataGetThumbnailSVGHref(): array { + return [ + ['href'], + [' href'], + ["\nhref"], + ['xlink:href'], + [' xlink:href'], + ["\nxlink:href"], + ]; + } + + /** + * @dataProvider dataGetThumbnailSVGHref + * @requires extension imagick + */ + public function testGetThumbnailSVGHref(string $content): void { + $handle = fopen('php://temp', 'w+'); + fwrite($handle, '<svg viewBox="0 0 100 100" xmlns="http://www.w3.org/2000/svg"> + <image x="0" y="0"' . $content . '="fxlogo.png" height="100" width="100" /> +</svg>'); + rewind($handle); + + $file = $this->createMock(\OCP\Files\File::class); + $file->method('fopen') + ->willReturn($handle); + + self::assertNull($this->provider->getThumbnail($file, 512, 512)); + } } |