? ? NPM Resource Changed Pending

User tests: Successful: Unsuccessful:

avatar dgrammatiko
dgrammatiko
5 Aug 2021

Pull Request for Issue # .

Summary of Changes

  • This PR adds a data-path that reflects to the unresolved URI for an image
  • It affects only images inserted into an editor
  • Allows plugins to work with external adapters (now it's impossible to get from the resolved URL to the adapter, path, etc)

Testing Instructions

Apply the patch
run npm install
Create a new article and try to insert an image into the editor
Switch to code view and observe that there is a data-path attribute. Image tag looks like: <img src="images/joomla_black.png" width="225" height="50" loading="lazy" data-path="local-images:/joomla_black.png" />

Actual result BEFORE applying this Pull Request

No way to get to the adapter/path

Expected result AFTER applying this Pull Request

Documentation Changes Required

@wilsonge I will be extremelly thankful if this could be patched before GA

avatar dgrammatiko dgrammatiko - open - 5 Aug 2021
avatar dgrammatiko dgrammatiko - change - 5 Aug 2021
Status New Pending
avatar joomla-cms-bot joomla-cms-bot - change - 5 Aug 2021
Category JavaScript Repository NPM Change
avatar richard67
richard67 - comment - 5 Aug 2021

Does this PR solve issue #35054 or helps solving it?

avatar dgrammatiko
dgrammatiko - comment - 5 Aug 2021

Does this PR solve issue #35054 or helps solving it?

Not really, also I don't think there's an issue with the media picker, probably they have outdated js files (or mixed RC versions)

avatar richard67
richard67 - comment - 5 Aug 2021

Does this PR solve issue #35054 or helps solving it?

Not really, also I don't think there's an issue with the media picker, probably they have outdated js files (or mixed RC versions)

Yes, that’s what I meanwhile think, too.

avatar RickR2H RickR2H - test_item - 5 Aug 2021 - Tested successfully
avatar RickR2H
RickR2H - comment - 5 Aug 2021

I have tested this item successfully on 1d8d15e

data-path is added. Path works.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/35049.

avatar wilsonge
wilsonge - comment - 6 Aug 2021

@joomla/security would appreciate a quick review here. I can't easily think of a way this could be exploited but just in case.

avatar richard67 richard67 - test_item - 8 Aug 2021 - Tested successfully
avatar richard67
richard67 - comment - 8 Aug 2021

I have tested this item successfully on 1d8d15e

Works as described.

Regarding security implications: I don't see any, but I might be missing something.


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/35049.

avatar richard67 richard67 - change - 8 Aug 2021
Status Pending Ready to Commit
Labels Added: NPM Resource Changed
avatar richard67
richard67 - comment - 8 Aug 2021

RTC


This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/35049.

avatar wilsonge wilsonge - change - 12 Sep 2021
Status Ready to Commit Fixed in Code Base
Closed_Date 0000-00-00 00:00:00 2021-09-12 09:05:21
Closed_By wilsonge
Labels Added: ? ?
avatar wilsonge wilsonge - close - 12 Sep 2021
avatar wilsonge wilsonge - merge - 12 Sep 2021
avatar wilsonge
wilsonge - comment - 12 Sep 2021

Thanks!

Add a Comment

Login with GitHub to post a comment