Install

Works with Drupal: ^10 || ^11

Using Composer to manage Drupal site dependencies

Alternative installation files

Download tar.gz 64.68 KB
MD5: 07e2b0d9f3b71dbb13a764d2b2b6224d
SHA-1: cd277dbd54cd0badb73e33b94ceeedc504b2ebce
SHA-256: fa357c1f8d39f709be8ba857c9cf82614cd1a69d8cad520ee0393ab3ff9d1709
Download zip 101.51 KB
MD5: 90ea0bf52f7143d67dd347165a99e96b
SHA-1: 798caf55add1264f5e273dcb78726e8183267970
SHA-256: 28752038b0f44aa93b5e40d346d786b84ac8524d4417727ea6a100d787587bef
Downloads are for manual installation, which is not recommended when using Drupal 8 or later.

Release notes

🛡️ Security Fixes

External Control of File Name or Path:

  • Sanitized and validated all file name and path inputs to prevent external manipulation that could lead to unauthorized file access or overwriting.

Untrusted Input in File Path Construction:

  • Hardened file handling logic to ensure untrusted user input cannot be used to construct file paths, mitigating the risk of directory traversal and unauthorized access.

Access Bypass via File Upload to Restricted Paths:

  • Resolved an access bypass vulnerability that allowed users to upload files to restricted directories, enforcing proper permission checks and path validation.
Created by: bigbabert
Created on: 14 May 2025 at 19:12 UTC
Last updated: 14 May 2025 at 19:12 UTC
Git tag 1.0.3
Bug fixes

Other releases