xsendfile 8.x-1.2

Security update

See Xsendfile - Moderately critical - Access bypass - SA-CONTRIB-2023-053.

This release brings XsendfileImageStyleDownloadController and XsendfileFileDownloadController in line with core controllers.

This module replaces ImageStyleDownloadController and FileDownloadController with its own implementations. Versions of Xsendfile previous to this one (8.x-1.2) don't include the fix for SA-CORE-2023-005.

Pages

Subscribe with RSS Subscribe to RSS - Security update