Closed (outdated)
Project:
Feeds
Version:
6.x-1.x-dev
Component:
Code
Priority:
Major
Category:
Bug report
Assigned:
Unassigned
Reporter:
Created:
26 Jul 2011 at 14:54 UTC
Updated:
16 Jun 2016 at 20:50 UTC
Jump to comment: Most recent
Currently files mapped through feeds aren't validated? This seemed a bit of a security risk, for example, banned file types could find their way in through feeds... I couldn't think of a use case for files not being validated against their mapped field settings, but I might be missing somethign.
I just adjusted the field_file_save_file section in mappers/filefield.inc
to:
$file_validators = filefield_widget_upload_validators($field);
$image_validators = imagefield_widget_upload_validators($field);
$validators = array_merge($file_validators, $image_validators);
$info = field_file_save_file($enclosure->getFile(), $validators, $target_dir);
Comments
Comment #1
twistor commented