This patch adds the full path to the font selector in image_captcha, so the site administrator knows better which font he selects.

This could also prevent a possible security issue. When there is an exploitable bug (e.g. buffer overflow) in the TTF-handling code of the PHP image library, a malicious user with upload permissions could upload a dangerous TTF file with the same name of an already available font. Without the full path, the site administrator has no means to determine which selection he has to make.

Comments

robloach’s picture

Status: Needs review » Reviewed & tested by the community
StatusFileSize
new27.99 KB

Although it can clog up the selection box (see screenshot), I have to say this is a good thing to have.

wundo’s picture

+1 thanks

wundo’s picture

Assigned: Unassigned » wundo
Status: Reviewed & tested by the community » Closed (duplicate)
soxofaan’s picture

Status: Closed (duplicate) » Fixed

I think wundo hit the wrong entry ("duplicate") in #3 ;)
commit: http://drupal.org/cvs?commit=78723

Anonymous’s picture

Status: Fixed » Closed (fixed)