Commit 38ad47c6 authored by Drew Webber's avatar Drew Webber
Browse files

Filename handling fix

parent 9c5d65cc
Loading
Loading
Loading
Loading
+4 −2
Original line number Diff line number Diff line
@@ -113,9 +113,11 @@ class MediaOEmbedStreamWrapper extends MediaReadOnlyStreamWrapper {

          $filename = drupal_basename($parsed_url['path']);

          if (strpos($filename, '.') !== FALSE) {
            $filename = file_munge_filename($filename, 'jpg jpeg gif png', FALSE);
          // Compare the extension with an allow-list.
          if (!preg_match('/\.(jpg|jpeg|gif|png)$/', $filename)) {
            return FALSE;
          }
          $filename = file_munge_filename($filename, '', FALSE);

          $path .= $filename;
          $local_uri = file_stream_wrapper_uri_normalize('public://media-oembed/' . $path);