[MGNLDAM-1010] DOC: DAM app upload restriction for SVG assets Created: 19/Jan/22 Updated: 29/Jun/22 Resolved: 27/Jan/22 |
|
| Status: | Closed |
| Project: | Magnolia DAM Module |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | None |
| Type: | Task | Priority: | Neutral |
| Reporter: | Adrian Brooks | Assignee: | Adrian Brooks |
| Resolution: | Done | Votes: | 0 |
| Labels: | None | ||
| Remaining Estimate: | Not Specified | ||
| Time Spent: | Not Specified | ||
| Original Estimate: | Not Specified | ||
| Issue Links: |
|
||||
| Template: |
|
||||
| Acceptance criteria: |
Empty
|
||||
| Task DoR: |
Empty
|
||||
| Epic Link: | XSS vulnerability over SVG uploads | ||||
| Sprint: | AuthorX 1 | ||||
| Story Points: | 0.5 | ||||
| Description |
|
SVG assets are not allowed in the DAM app from version 3.0.13 or higher. See bug: MGNLDAM-954 |
| Comments |
| Comment by Adrian Brooks [ 21/Jan/22 ] |
|
Added a tip to the DAM module usage section (https://docs.magnolia-cms.com/product-docs/6.2/Connector-Packs/DAM-Connector-Pack/External-DAM-module.html#_usage) about the new check for malicious code in assets.
|
| Comment by Adrian Brooks [ 27/Jan/22 ] |
|
Tip added in the usage section. |