This patch adds the full path to the font selector in image_captcha, so the site administrator knows better which font he selects.
This could also prevent a possible security issue. When there is an exploitable bug (e.g. buffer overflow) in the TTF-handling code of the PHP image library, a malicious user with upload permissions could upload a dangerous TTF file with the same name of an already available font. Without the full path, the site administrator has no means to determine which selection he has to make.
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | captchafonts.png | 27.99 KB | robloach |
| image_captcha_font_path_issue.patch | 806 bytes | soxofaan |
Comments
Comment #1
robloachAlthough it can clog up the selection box (see screenshot), I have to say this is a good thing to have.
Comment #2
wundo commented+1 thanks
Comment #3
wundo commentedComment #4
soxofaan commentedI think wundo hit the wrong entry ("duplicate") in #3 ;)
commit: http://drupal.org/cvs?commit=78723
Comment #5
(not verified) commented