revi-archive/phorge-phorge
1
0
Fork 0
mirror of https://we.phorge.it/source/phorge.git synced 2024-11-18 21:02:41 +01:00
Code Issues Releases Wiki Activity

Unguard thumbnail generation from CSRF.

Browse source
This commit is contained in:
epriestley 2011-08-17 14:39:00 -07:00
parent d3558eb25f
commit b291ad9807
1 changed files with 4 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
src/applications/files/controller/transform/PhabricatorFileTransformController.php
View file

@ -49,6 +49,10 @@ class PhabricatorFileTransformController extends PhabricatorFileController {
return $this->buildDefaultTransformation($file); return $this->buildDefaultTransformation($file);
} }
// We're essentially just building a cache here and don't need CSRF
// protection.
$unguarded = AphrontWriteGuard::beginScopedUnguardedWrites();
switch ($this->transform) { switch ($this->transform) {
case 'thumb-160x120': case 'thumb-160x120':
$xformed_file = $this->executeThumbTransform($file, 160, 120); $xformed_file = $this->executeThumbTransform($file, 160, 120);