Problem/Motivation

Security update available: https://www.drupal.org/sa-core-2020-012
https://www.drupal.org/sa-contrib-2020-036

Steps to reproduce

No

Proposed resolution

Need to apply the same logic like in media_oembed module https://git.drupalcode.org/project/media_oembed/commit/38ad47c
Following code: oembed_remote_file_formatter_view() line 688

Remaining tasks

Create a patch

User interface changes

No

API changes

No

Data model changes

No

CommentFileSizeAuthor
#5 oembed-sec_fix_sa_contrib_2020_036-3183485-5.patch754 bytessokru
#3 oembed-sec_fix_sa_contrib_2020_036-3183485-3.patch824 bytesbsztreha

Comments

bsztreha created an issue. See original summary.

bsztreha’s picture

bsztreha commented
Issue summary: View changes
bsztreha’s picture

bsztreha commented
Assigned: bsztreha » Unassigned
Status: Needs work » Needs review
StatusFileSize
new oembed-sec_fix_sa_contrib_2020_036-3183485-3.patch824 bytes
sokru’s picture

sokru commented
Version: 7.x-1.0-rc2 » 7.x-1.x-dev
Status: Needs review » Reviewed & tested by the community

Looks good and very important to fix!

sokru’s picture

sokru commented
StatusFileSize
new oembed-sec_fix_sa_contrib_2020_036-3183485-5.patch754 bytes

Reroll patch #3 to apply against 7.x-1.x-dev branch.

bsztreha’s picture

bsztreha commented

Thanks to create a patch for dev too

astonvictor’s picture

astonvictor commented
Status: Reviewed & tested by the community » Closed (outdated)

D7 reached its EOL back in January 2025, and there is no active release for D7 for this module anymore.
Development or support is not planned for D7. All D7-related issues are marked as outdated in a bunch.

Now that this issue is closed, please review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, please credit people who helped resolve this issue.