Currently files mapped through feeds aren't validated? This seemed a bit of a security risk, for example, banned file types could find their way in through feeds... I couldn't think of a use case for files not being validated against their mapped field settings, but I might be missing somethign.

I just adjusted the field_file_save_file section in mappers/filefield.inc
to:

$file_validators  = filefield_widget_upload_validators($field);
$image_validators = imagefield_widget_upload_validators($field);
$validators       = array_merge($file_validators, $image_validators);
$info = field_file_save_file($enclosure->getFile(), $validators, $target_dir);

Comments

twistor’s picture

Issue summary: View changes
Status: Active » Closed (outdated)