User tests: Successful: Unsuccessful:
Pull Request for Issue # .
data-path
that reflects to the unresolved URI for an imageApply the patch
run npm install
Create a new article and try to insert an image into the editor
Switch to code view and observe that there is a data-path
attribute. Image tag looks like: <img src="images/joomla_black.png" width="225" height="50" loading="lazy" data-path="local-images:/joomla_black.png" />
No way to get to the adapter/path
@wilsonge I will be extremelly thankful if this could be patched before GA
Status | New | ⇒ | Pending |
Category | ⇒ | JavaScript Repository NPM Change |
I have tested this item
data-path is added. Path works.
@joomla/security would appreciate a quick review here. I can't easily think of a way this could be exploited but just in case.
I have tested this item
Works as described.
Regarding security implications: I don't see any, but I might be missing something.
Status | Pending | ⇒ | Ready to Commit |
Labels |
Added:
NPM Resource Changed
|
RTC
Status | Ready to Commit | ⇒ | Fixed in Code Base |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2021-09-12 09:05:21 |
Closed_By | ⇒ | wilsonge | |
Labels |
Added:
?
?
|
Thanks!
Does this PR solve issue #35054 or helps solving it?