Allow uploads of files containing dots in filename. Closes BookStackApp/BookStack...

diff --git a/app/Http/Controllers/Controller.php b/app/Http/Controllers/Controller.php
index 479d5ac15852be57d44370f433185c15839af226..034dfa524192013b4766880ebb878176ef95d496 100644 (file)
--- a/app/Http/Controllers/Controller.php
+++ b/app/Http/Controllers/Controller.php
@@ -159,6 +159,6 @@ abstract class Controller extends BaseController
      */
     protected function getImageValidationRules(): string
     {
      */
     protected function getImageValidationRules(): string
     {

-        return 'image_extension|no_double_extension|mimes:jpeg,png,gif,webp';
+        return 'image_extension|mimes:jpeg,png,gif,webp';

     }
 }
     }
 }

diff --git a/app/Providers/CustomValidationServiceProvider.php b/app/Providers/CustomValidationServiceProvider.php
index 4a5272b409afac6d196b18a947377504f1c7074f..b668a4cd22b4312f6f7ce17649177de25a09ce1e 100644 (file)
--- a/app/Providers/CustomValidationServiceProvider.php
+++ b/app/Providers/CustomValidationServiceProvider.php
@@ -18,11 +18,6 @@ class CustomValidationServiceProvider extends ServiceProvider
             return in_array(strtolower($value->getClientOriginalExtension()), $validImageExtensions);
         });
 
             return in_array(strtolower($value->getClientOriginalExtension()), $validImageExtensions);
         });
 

-        Validator::extend('no_double_extension', function ($attribute, $value, $parameters, $validator) {
-            $uploadName = $value->getClientOriginalName();
-            return substr_count($uploadName, '.') < 2;
-        });
-

         Validator::extend('safe_url', function ($attribute, $value, $parameters, $validator) {
             $cleanLinkName = strtolower(trim($value));
             $isJs = strpos($cleanLinkName, 'javascript:') === 0;
         Validator::extend('safe_url', function ($attribute, $value, $parameters, $validator) {
             $cleanLinkName = strtolower(trim($value));
             $isJs = strpos($cleanLinkName, 'javascript:') === 0;

diff --git a/app/Uploads/ImageService.php b/app/Uploads/ImageService.php
index 92c3994a71e0386a792951dac75b6ad5542b9ec7..ee42e6e3345066ca26d9eac4449cc8ade2691610 100644 (file)
--- a/app/Uploads/ImageService.php
+++ b/app/Uploads/ImageService.php
@@ -60,7 +60,7 @@ class ImageService
         int $resizeHeight = null,
         bool $keepRatio = true
     ) {
         int $resizeHeight = null,
         bool $keepRatio = true
     ) {

-        $imageName = $uploadedFile->getClientOriginalName();
+        $imageName = $this->sanitizeFileName($uploadedFile->getClientOriginalName());

         $imageData = file_get_contents($uploadedFile->getRealPath());
 
         if ($resizeWidth !== null || $resizeHeight !== null) {
         $imageData = file_get_contents($uploadedFile->getRealPath());
 
         if ($resizeWidth !== null || $resizeHeight !== null) {


@@ -426,4 +426,15 @@ class ImageService
         $basePath = ($this->storageUrl == false) ? url('/') : $this->storageUrl;
         return rtrim($basePath, '/') . $filePath;
     }
         $basePath = ($this->storageUrl == false) ? url('/') : $this->storageUrl;
         return rtrim($basePath, '/') . $filePath;
     }

+
+    /**
+     * Returns a sanitized filename with only one file extension
+     */
+    private function sanitizeFileName(string $fileName): string
+    {
+        $parts = explode('.', $fileName);
+        $extension = array_pop($parts);
+
+        return sprintf('%s.%s', implode('-', $parts), $extension);
+    }

 }
 }

diff --git a/resources/lang/ar/validation.php b/resources/lang/ar/validation.php
index d0b17460bccbb992c93f8c71a3895d4fdbe2fad3..3c03f2efd7269e68f72e8e5f96cc921b828abd30 100644 (file)
--- a/resources/lang/ar/validation.php
+++ b/resources/lang/ar/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'يجب أن يكون :attribute على الأقل :min حرف / حروف.',
         'array'   => 'يجب أن يحتوي :attribute على :min عنصر / عناصر كحد أدنى.',
     ],
         'string'  => 'يجب أن يكون :attribute على الأقل :min حرف / حروف.',
         'array'   => 'يجب أن يحتوي :attribute على :min عنصر / عناصر كحد أدنى.',
     ],

-    'no_double_extension'  => 'يجب أن يكون للسمة: امتداد ملف واحد فقط.',

     'not_in'               => ':attribute المحدد غير صالح.',
     'not_regex'            => 'صيغة السمة: غير صالحة.',
     'numeric'              => 'يجب أن يكون :attribute رقم.',
     'not_in'               => ':attribute المحدد غير صالح.',
     'not_regex'            => 'صيغة السمة: غير صالحة.',
     'numeric'              => 'يجب أن يكون :attribute رقم.',

diff --git a/resources/lang/bg/validation.php b/resources/lang/bg/validation.php
index 578ea999fc31618997be7834012fb30aed3d7b1f..4031de2ae743b75bafd49195ff06b29a347cbf22 100644 (file)
--- a/resources/lang/bg/validation.php
+++ b/resources/lang/bg/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],

-    'no_double_extension'  => 'The :attribute must only have a single file extension.',

     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',
     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',

diff --git a/resources/lang/cs/validation.php b/resources/lang/cs/validation.php
index a843973497637e5b2905c98021e0b115fa4e17c9..1a94b9e24f210a7c17eea9c3328ee1b2364ffdc9 100644 (file)
--- a/resources/lang/cs/validation.php
+++ b/resources/lang/cs/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute musí být delší než :min znaků.',
         'array'   => ':attribute musí obsahovat více než :min prvků.',
     ],
         'string'  => ':attribute musí být delší než :min znaků.',
         'array'   => ':attribute musí obsahovat více než :min prvků.',
     ],

-    'no_double_extension'  => ':attribute musí obsahovat pouze jednu příponu souboru.',

     'not_in'               => 'Zvolená hodnota pro :attribute je neplatná.',
     'not_regex'            => ':attribute musí být regulární výraz.',
     'numeric'              => ':attribute musí být číslo.',
     'not_in'               => 'Zvolená hodnota pro :attribute je neplatná.',
     'not_regex'            => ':attribute musí být regulární výraz.',
     'numeric'              => ':attribute musí být číslo.',

diff --git a/resources/lang/da/validation.php b/resources/lang/da/validation.php
index 7647132ca114134ac8370228802d2c06edd27730..d4564c571bc9acbce55f394d2cb3b85b0e43dc12 100644 (file)
--- a/resources/lang/da/validation.php
+++ b/resources/lang/da/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute skal mindst være :min tegn.',
         'array'   => ':attribute skal have mindst :min elementer.',
     ],
         'string'  => ':attribute skal mindst være :min tegn.',
         'array'   => ':attribute skal have mindst :min elementer.',
     ],

-    'no_double_extension'  => ':attribute må kun indeholde én filtype.',

     'not_in'               => 'Den valgte :attribute er ikke gyldig.',
     'not_regex'            => ':attribute-formatet er ugyldigt.',
     'numeric'              => ':attribute skal være et tal.',
     'not_in'               => 'Den valgte :attribute er ikke gyldig.',
     'not_regex'            => ':attribute-formatet er ugyldigt.',
     'numeric'              => ':attribute skal være et tal.',

diff --git a/resources/lang/de/validation.php b/resources/lang/de/validation.php
index 8b1febc85d8da7078606d6c0e76f8f8a6364db2e..50f8a76a3e3817efd1ad4aedcc2ce41d0ecb734d 100644 (file)
--- a/resources/lang/de/validation.php
+++ b/resources/lang/de/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute muss mindestens :min Zeichen lang sein.',
         'array'   => ':attribute muss mindesten :min Elemente enthalten.',
     ],
         'string'  => ':attribute muss mindestens :min Zeichen lang sein.',
         'array'   => ':attribute muss mindesten :min Elemente enthalten.',
     ],

-    'no_double_extension'  => ':attribute darf nur eine gültige Dateiendung',

     'not_in'               => ':attribute ist ungültig.',
     'not_regex'            => ':attribute ist kein valides Format.',
     'numeric'              => ':attribute muss eine Zahl sein.',
     'not_in'               => ':attribute ist ungültig.',
     'not_regex'            => ':attribute ist kein valides Format.',
     'numeric'              => ':attribute muss eine Zahl sein.',

diff --git a/resources/lang/de_informal/validation.php b/resources/lang/de_informal/validation.php
index 24c1e8addb8e224e4ce848427a3da45a3ff49e70..42456da6eb3a13593cddbee4ea72643faad0dacf 100644 (file)
--- a/resources/lang/de_informal/validation.php
+++ b/resources/lang/de_informal/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute muss mindestens :min Zeichen lang sein.',
         'array'   => ':attribute muss mindesten :min Elemente enthalten.',
     ],
         'string'  => ':attribute muss mindestens :min Zeichen lang sein.',
         'array'   => ':attribute muss mindesten :min Elemente enthalten.',
     ],

-    'no_double_extension'  => ':attribute darf nur eine gültige Dateiendung',

     'not_in'               => ':attribute ist ungültig.',
     'not_regex'            => ':attribute ist kein gültiges Format.',
     'numeric'              => ':attribute muss eine Zahl sein.',
     'not_in'               => ':attribute ist ungültig.',
     'not_regex'            => ':attribute ist kein gültiges Format.',
     'numeric'              => ':attribute muss eine Zahl sein.',

diff --git a/resources/lang/en/validation.php b/resources/lang/en/validation.php
index 578ea999fc31618997be7834012fb30aed3d7b1f..4031de2ae743b75bafd49195ff06b29a347cbf22 100644 (file)
--- a/resources/lang/en/validation.php
+++ b/resources/lang/en/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],

-    'no_double_extension'  => 'The :attribute must only have a single file extension.',

     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',
     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',

diff --git a/resources/lang/es/validation.php b/resources/lang/es/validation.php
index f6f9a1ee12bf65c98841af1aca9efb17ccad5455..450e923753b001d77f58a84a31a33c56c991dcf0 100644 (file)
--- a/resources/lang/es/validation.php
+++ b/resources/lang/es/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'El :attribute debe ser al menos :min caracteres.',
         'array'   => 'El :attribute debe tener como mínimo :min items.',
     ],
         'string'  => 'El :attribute debe ser al menos :min caracteres.',
         'array'   => 'El :attribute debe tener como mínimo :min items.',
     ],

-    'no_double_extension'  => 'El :attribute solo debe tener una extensión de archivo.',

     'not_in'               => 'El :attribute seleccionado es inválio.',
     'not_regex'            => 'El formato de :attribute es inválido.',
     'numeric'              => 'El :attribute debe ser numérico.',
     'not_in'               => 'El :attribute seleccionado es inválio.',
     'not_regex'            => 'El formato de :attribute es inválido.',
     'numeric'              => 'El :attribute debe ser numérico.',

diff --git a/resources/lang/es_AR/validation.php b/resources/lang/es_AR/validation.php
index 7afd2bb461fbbe5c16852b70525c8e849ab03bdb..3e37f619edee924698600acdec5e07e1055c19e4 100644 (file)
--- a/resources/lang/es_AR/validation.php
+++ b/resources/lang/es_AR/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute debe ser al menos :min caracteres.',
         'array'   => ':attribute debe tener como mínimo :min items.',
     ],
         'string'  => ':attribute debe ser al menos :min caracteres.',
         'array'   => ':attribute debe tener como mínimo :min items.',
     ],

-    'no_double_extension'  => 'El :attribute debe tener una única extensión de archivo.',

     'not_in'               => ':attribute seleccionado es inválido.',
     'not_regex'            => 'El formato de :attribute es inválido.',
     'numeric'              => ':attribute debe ser numérico.',
     'not_in'               => ':attribute seleccionado es inválido.',
     'not_regex'            => 'El formato de :attribute es inválido.',
     'numeric'              => ':attribute debe ser numérico.',

diff --git a/resources/lang/fa/validation.php b/resources/lang/fa/validation.php
index 76b57a2a3b58ddb8ef41e0562c5187359cc6e542..f4af9bc6f010ff1eed03b1cbc77e95d1490e53b4 100644 (file)
--- a/resources/lang/fa/validation.php
+++ b/resources/lang/fa/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],

-    'no_double_extension'  => 'The :attribute must only have a single file extension.',

     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',
     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',

diff --git a/resources/lang/fr/validation.php b/resources/lang/fr/validation.php
index 60d8d34acfb02193039909d432e6d86760ceba52..684404f42d45c5ad921c0d95fa879c714c41dc40 100644 (file)
--- a/resources/lang/fr/validation.php
+++ b/resources/lang/fr/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute doit contenir au moins :min caractères.',
         'array'   => ':attribute doit contenir au moins :min éléments.',
     ],
         'string'  => ':attribute doit contenir au moins :min caractères.',
         'array'   => ':attribute doit contenir au moins :min éléments.',
     ],

-    'no_double_extension'  => ':attribute ne doit avoir qu\'une seule extension de fichier.',

     'not_in'               => 'L\'attribut sélectionné :attribute est invalide.',
     'not_regex'            => ':attribute a un format invalide.',
     'numeric'              => ':attribute doit être un nombre.',
     'not_in'               => 'L\'attribut sélectionné :attribute est invalide.',
     'not_regex'            => ':attribute a un format invalide.',
     'numeric'              => ':attribute doit être un nombre.',

diff --git a/resources/lang/he/validation.php b/resources/lang/he/validation.php
index 7c02735ca067f8e7876a016323c24c69d39db7a2..8a18ca27a21c3c85a81a18c891d3ba88553e0247 100644 (file)
--- a/resources/lang/he/validation.php
+++ b/resources/lang/he/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'שדה :attribute חייב להיות לפחות :min תווים.',
         'array'   => 'שדה :attribute חייב להיות לפחות :min פריטים.',
     ],
         'string'  => 'שדה :attribute חייב להיות לפחות :min תווים.',
         'array'   => 'שדה :attribute חייב להיות לפחות :min פריטים.',
     ],

-    'no_double_extension'  => 'השדה :attribute חייב להיות בעל סיומת קובץ אחת בלבד.',

     'not_in'               => 'בחירת ה-:attribute אינה תקפה.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'שדה :attribute חייב להיות מספר.',
     'not_in'               => 'בחירת ה-:attribute אינה תקפה.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'שדה :attribute חייב להיות מספר.',

diff --git a/resources/lang/hu/validation.php b/resources/lang/hu/validation.php
index 7c378e983cc58cf629c05005e11c9c1b938ce98d..d82e3263274961cdce7bfd5aac33e5d7644c935d 100644 (file)
--- a/resources/lang/hu/validation.php
+++ b/resources/lang/hu/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute legalább :min karakter kell legyen.',
         'array'   => ':attribute legalább :min elem kell legyen.',
     ],
         'string'  => ':attribute legalább :min karakter kell legyen.',
         'array'   => ':attribute legalább :min elem kell legyen.',
     ],

-    'no_double_extension'  => ':attribute csak egy fájlkiterjesztéssel rendelkezhet.',

     'not_in'               => 'A kiválasztott :attribute érvénytelen.',
     'not_regex'            => ':attribute formátuma érvénytelen.',
     'numeric'              => ':attribute szám kell legyen.',
     'not_in'               => 'A kiválasztott :attribute érvénytelen.',
     'not_regex'            => ':attribute formátuma érvénytelen.',
     'numeric'              => ':attribute szám kell legyen.',

diff --git a/resources/lang/it/validation.php b/resources/lang/it/validation.php
index 2e460cdc382715a74492197fe0d31da98364de5b..bb602619cea562e94c620f9d7f7ddcde602b640d 100755 (executable)
--- a/resources/lang/it/validation.php
+++ b/resources/lang/it/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'Il campo :attribute deve essere almeno :min caratteri.',
         'array'   => 'Il campo :attribute deve contenere almeno :min elementi.',
     ],
         'string'  => 'Il campo :attribute deve essere almeno :min caratteri.',
         'array'   => 'Il campo :attribute deve contenere almeno :min elementi.',
     ],

-    'no_double_extension'  => ':attribute deve avere solo un\'estensione.',

     'not_in'               => 'Il :attribute selezionato non è valido.',
     'not_regex'            => 'Il formato di :attribute non è valido.',
     'numeric'              => ':attribute deve essere un numero.',
     'not_in'               => 'Il :attribute selezionato non è valido.',
     'not_regex'            => 'Il formato di :attribute non è valido.',
     'numeric'              => ':attribute deve essere un numero.',

diff --git a/resources/lang/ja/validation.php b/resources/lang/ja/validation.php
index 61057f17ee00d6e3aedfddaf453af17d99f0f5a3..7d9987ce073e22a0137fdef9a216cf9f4cc84d5c 100644 (file)
--- a/resources/lang/ja/validation.php
+++ b/resources/lang/ja/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attributeは:min文字以上である必要があります。',
         'array'   => ':attributeは:min個以上である必要があります。',
     ],
         'string'  => ':attributeは:min文字以上である必要があります。',
         'array'   => ':attributeは:min個以上である必要があります。',
     ],

-    'no_double_extension'  => 'The :attribute must only have a single file extension.',

     'not_in'               => '選択された:attributeは不正です。',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => ':attributeは数値である必要があります。',
     'not_in'               => '選択された:attributeは不正です。',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => ':attributeは数値である必要があります。',

diff --git a/resources/lang/ko/validation.php b/resources/lang/ko/validation.php
index 64c4a4345b256d7d1c31f4dc9ea7466a3fc6e647..6754d962069082ea2884d8875a5a8980f143ae15 100644 (file)
--- a/resources/lang/ko/validation.php
+++ b/resources/lang/ko/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute(을)를 적어도 :value바이트로 구성하세요.',
         'array'   => ':attribute(을)를 적어도 :value개로 구성하세요..',
     ],
         'string'  => ':attribute(을)를 적어도 :value바이트로 구성하세요.',
         'array'   => ':attribute(을)를 적어도 :value개로 구성하세요..',
     ],

-    'no_double_extension'  => ':attribute(이)가 단일한 확장자를 가져야 합니다.',

     'not_in'               => '고른 :attribute(이)가 유효하지 않습니다.',
     'not_regex'            => ':attribute(은)는 유효하지 않은 형식입니다.',
     'numeric'              => ':attribute(을)를 숫자로만 구성하세요.',
     'not_in'               => '고른 :attribute(이)가 유효하지 않습니다.',
     'not_regex'            => ':attribute(은)는 유효하지 않은 형식입니다.',
     'numeric'              => ':attribute(을)를 숫자로만 구성하세요.',

diff --git a/resources/lang/nb/validation.php b/resources/lang/nb/validation.php
index 87e6c7529615f748901d2ce17ba225e22a7901e4..eca6dd6ba708eda24c40e75e5d2087cd8b3d8e5f 100644 (file)
--- a/resources/lang/nb/validation.php
+++ b/resources/lang/nb/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute må være på minst :min tegn.',
         'array'   => ':attribute må minst ha :min ting.',
     ],
         'string'  => ':attribute må være på minst :min tegn.',
         'array'   => ':attribute må minst ha :min ting.',
     ],

-    'no_double_extension'  => ':attribute kan bare ha en formattype spesifisert.',

     'not_in'               => 'Den valgte :attribute er ugyldig.',
     'not_regex'            => ':attribute format er ugyldig.',
     'numeric'              => ':attribute må være et nummer.',
     'not_in'               => 'Den valgte :attribute er ugyldig.',
     'not_regex'            => ':attribute format er ugyldig.',
     'numeric'              => ':attribute må være et nummer.',

diff --git a/resources/lang/nl/validation.php b/resources/lang/nl/validation.php
index 2f8ffc9f0531959e4ff2098ad06f7a297890d9dd..fa169105068943bc69914bf4f56c9df62f12f0e2 100644 (file)
--- a/resources/lang/nl/validation.php
+++ b/resources/lang/nl/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute moet minstens :min karakters bevatten.',
         'array'   => ':attribute moet minstens :min items bevatten.',
     ],
         'string'  => ':attribute moet minstens :min karakters bevatten.',
         'array'   => ':attribute moet minstens :min items bevatten.',
     ],

-    'no_double_extension'  => ':attribute mag maar een enkele bestandsextensie hebben.',

     'not_in'               => ':attribute is ongeldig.',
     'not_regex'            => ':attribute formaat is ongeldig.',
     'numeric'              => ':attribute moet een getal zijn.',
     'not_in'               => ':attribute is ongeldig.',
     'not_regex'            => ':attribute formaat is ongeldig.',
     'numeric'              => ':attribute moet een getal zijn.',

diff --git a/resources/lang/pl/validation.php b/resources/lang/pl/validation.php
index 26ac348c1aa955d97af065e3bd538f7eb229df10..cc33dc878654da38e09ecc408f6f48c4d6377f90 100644 (file)
--- a/resources/lang/pl/validation.php
+++ b/resources/lang/pl/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'Długość :attribute nie może być mniejsza niż :min znaków.',
         'array'   => 'Rozmiar :attribute musi posiadać co najmniej :min elementy.',
     ],
         'string'  => 'Długość :attribute nie może być mniejsza niż :min znaków.',
         'array'   => 'Rozmiar :attribute musi posiadać co najmniej :min elementy.',
     ],

-    'no_double_extension'  => ':attribute może mieć tylko jedno rozszerzenie.',

     'not_in'               => 'Wartość :attribute jest nieprawidłowa.',
     'not_regex'            => 'Format :attribute jest nieprawidłowy.',
     'numeric'              => ':attribute musi być liczbą.',
     'not_in'               => 'Wartość :attribute jest nieprawidłowa.',
     'not_regex'            => 'Format :attribute jest nieprawidłowy.',
     'numeric'              => ':attribute musi być liczbą.',

diff --git a/resources/lang/pt/validation.php b/resources/lang/pt/validation.php
index 76b57a2a3b58ddb8ef41e0562c5187359cc6e542..f4af9bc6f010ff1eed03b1cbc77e95d1490e53b4 100644 (file)
--- a/resources/lang/pt/validation.php
+++ b/resources/lang/pt/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],

-    'no_double_extension'  => 'The :attribute must only have a single file extension.',

     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',
     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',

diff --git a/resources/lang/pt_BR/validation.php b/resources/lang/pt_BR/validation.php
index 9777eacac5c5ff756f94a776437fee19ed9a48d2..0d25a9b6ab63f430dfb70fe43e33d3aa00feebe9 100644 (file)
--- a/resources/lang/pt_BR/validation.php
+++ b/resources/lang/pt_BR/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'O campo :attribute não deve ter menos que :min caracteres.',
         'array'   => 'O campo :attribute não deve ter menos que :min itens.',
     ],
         'string'  => 'O campo :attribute não deve ter menos que :min caracteres.',
         'array'   => 'O campo :attribute não deve ter menos que :min itens.',
     ],

-    'no_double_extension'  => 'O campo :attribute deve ter apenas uma extensão de arquivo.',

     'not_in'               => 'O campo selecionado :attribute é inválido.',
     'not_regex'            => 'O formato do campo :attribute é inválido.',
     'numeric'              => 'O campo :attribute deve ser um número.',
     'not_in'               => 'O campo selecionado :attribute é inválido.',
     'not_regex'            => 'O formato do campo :attribute é inválido.',
     'numeric'              => 'O campo :attribute deve ser um número.',

diff --git a/resources/lang/ru/validation.php b/resources/lang/ru/validation.php
index d16ead5d843e737384416fd8152f9519cf83c337..8c583f7e7820eb72d748ac62ec1d94c6dfb05198 100644 (file)
--- a/resources/lang/ru/validation.php
+++ b/resources/lang/ru/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute должен быть минимум :min символов.',
         'array'   => ':attribute должен содержать хотя бы :min элементов.',
     ],
         'string'  => ':attribute должен быть минимум :min символов.',
         'array'   => ':attribute должен содержать хотя бы :min элементов.',
     ],

-    'no_double_extension'  => ':attribute должен иметь только одно расширение файла.',

     'not_in'               => 'Выбранный :attribute некорректен.',
     'not_regex'            => 'Формат :attribute некорректен.',
     'numeric'              => ':attribute должен быть числом.',
     'not_in'               => 'Выбранный :attribute некорректен.',
     'not_regex'            => 'Формат :attribute некорректен.',
     'numeric'              => ':attribute должен быть числом.',

diff --git a/resources/lang/sk/validation.php b/resources/lang/sk/validation.php
index c127b0623cc24158c006b7219ccf5f97546774c8..545313415afbf963738584626e2827ade96a8d09 100644 (file)
--- a/resources/lang/sk/validation.php
+++ b/resources/lang/sk/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute musí mať aspoň :min znakov.',
         'array'   => ':attribute musí mať aspoň :min položiek.',
     ],
         'string'  => ':attribute musí mať aspoň :min znakov.',
         'array'   => ':attribute musí mať aspoň :min položiek.',
     ],

-    'no_double_extension'  => 'The :attribute must only have a single file extension.',

     'not_in'               => 'Vybraný :attribute je neplatný.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => ':attribute musí byť číslo.',
     'not_in'               => 'Vybraný :attribute je neplatný.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => ':attribute musí byť číslo.',

diff --git a/resources/lang/sl/validation.php b/resources/lang/sl/validation.php
index bc7242bac35d4e1ab13861f568a14e4ffb216ac1..9b1a5ff463877dc18d5a0b554baee3427c2630b0 100644 (file)
--- a/resources/lang/sl/validation.php
+++ b/resources/lang/sl/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute mora biti najmanj :min znakov.',
         'array'   => ':attribute mora imeti vsaj :min elementov.',
     ],
         'string'  => ':attribute mora biti najmanj :min znakov.',
         'array'   => ':attribute mora imeti vsaj :min elementov.',
     ],

-    'no_double_extension'  => ':attribute mora imeti samo eno razširitveno datoteko',

     'not_in'               => 'Izbrani atribut je neveljaven.',
     'not_regex'            => ':attribute oblika ni veljavna.',
     'numeric'              => 'Atribut mora biti število.',
     'not_in'               => 'Izbrani atribut je neveljaven.',
     'not_regex'            => ':attribute oblika ni veljavna.',
     'numeric'              => 'Atribut mora biti število.',

diff --git a/resources/lang/sv/validation.php b/resources/lang/sv/validation.php
index 3190318559d1642c960bc6b2c612a27b874fb757..da39796bc388e6ad11b8ea6a273e3ada6c2c7f75 100644 (file)
--- a/resources/lang/sv/validation.php
+++ b/resources/lang/sv/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute måste vara minst :min tecken.',
         'array'   => ':attribute måste ha minst :min poster.',
     ],
         'string'  => ':attribute måste vara minst :min tecken.',
         'array'   => ':attribute måste ha minst :min poster.',
     ],

-    'no_double_extension'  => ':attribute får bara ha ett filtillägg.',

     'not_in'               => 'Vald :attribute är inte giltig',
     'not_regex'            => 'Formatet på :attribute är ogiltigt.',
     'numeric'              => ':attribute måste vara ett nummer.',
     'not_in'               => 'Vald :attribute är inte giltig',
     'not_regex'            => 'Formatet på :attribute är ogiltigt.',
     'numeric'              => ':attribute måste vara ett nummer.',

diff --git a/resources/lang/th/validation.php b/resources/lang/th/validation.php
index 76b57a2a3b58ddb8ef41e0562c5187359cc6e542..f4af9bc6f010ff1eed03b1cbc77e95d1490e53b4 100644 (file)
--- a/resources/lang/th/validation.php
+++ b/resources/lang/th/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],
         'string'  => 'The :attribute must be at least :min characters.',
         'array'   => 'The :attribute must have at least :min items.',
     ],

-    'no_double_extension'  => 'The :attribute must only have a single file extension.',

     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',
     'not_in'               => 'The selected :attribute is invalid.',
     'not_regex'            => 'The :attribute format is invalid.',
     'numeric'              => 'The :attribute must be a number.',

diff --git a/resources/lang/tr/validation.php b/resources/lang/tr/validation.php
index 45b7189d7dca89a2d3cc945f8be4d87f9b1052c8..48bbef92b20b316a7ed926979ddc62290d9f5f80 100644 (file)
--- a/resources/lang/tr/validation.php
+++ b/resources/lang/tr/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute, en az :min karakter içermelidir.',
         'array'   => ':attribute, en az :min öge içermelidir.',
     ],
         'string'  => ':attribute, en az :min karakter içermelidir.',
         'array'   => ':attribute, en az :min öge içermelidir.',
     ],

-    'no_double_extension'  => ':attribute, sadece tek bir dosya tipinde olmalıdır.',

     'not_in'               => 'Seçili :attribute geçersiz.',
     'not_regex'            => ':attribute formatı geçersiz.',
     'numeric'              => ':attribute, bir sayı olmalıdır.',
     'not_in'               => 'Seçili :attribute geçersiz.',
     'not_regex'            => ':attribute formatı geçersiz.',
     'numeric'              => ':attribute, bir sayı olmalıdır.',

diff --git a/resources/lang/uk/validation.php b/resources/lang/uk/validation.php
index 51b9a09990ff024bf83d2dac2edab6ccce92f05d..63b356cfe6eda17b13c345a4898f3cadb01c0f14 100644 (file)
--- a/resources/lang/uk/validation.php
+++ b/resources/lang/uk/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => 'Текст в полі :attribute повинен містити не менше :min символів.',
         'array'   => 'Поле :attribute повинне містити не менше :min елементів.',
     ],
         'string'  => 'Текст в полі :attribute повинен містити не менше :min символів.',
         'array'   => 'Поле :attribute повинне містити не менше :min елементів.',
     ],

-    'no_double_extension'  => 'Поле :attribute повинне містити тільки одне розширення файлу.',

     'not_in'               => 'Вибране для :attribute значення не коректне.',
     'not_regex'            => 'Формат поля :attribute не вірний.',
     'numeric'              => 'Поле :attribute повинно містити число.',
     'not_in'               => 'Вибране для :attribute значення не коректне.',
     'not_regex'            => 'Формат поля :attribute не вірний.',
     'numeric'              => 'Поле :attribute повинно містити число.',

diff --git a/resources/lang/vi/validation.php b/resources/lang/vi/validation.php
index c0020717506345e699dc887ea2d99d32e522a945..bcfb178fb5e2edb9d4bbde9c69e4cbb878534089 100644 (file)
--- a/resources/lang/vi/validation.php
+++ b/resources/lang/vi/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute phải có tối thiểu :min ký tự.',
         'array'   => ':attribute phải có tối thiểu :min mục.',
     ],
         'string'  => ':attribute phải có tối thiểu :min ký tự.',
         'array'   => ':attribute phải có tối thiểu :min mục.',
     ],

-    'no_double_extension'  => ':attribute chỉ được có một định dạng mở rộng duy nhất.',

     'not_in'               => ':attribute đã chọn không hợp lệ.',
     'not_regex'            => 'Định dạng của :attribute không hợp lệ.',
     'numeric'              => ':attribute phải là một số.',
     'not_in'               => ':attribute đã chọn không hợp lệ.',
     'not_regex'            => 'Định dạng của :attribute không hợp lệ.',
     'numeric'              => ':attribute phải là một số.',

diff --git a/resources/lang/zh_CN/validation.php b/resources/lang/zh_CN/validation.php
index 8bb8a207a00099893bf52e37d37ab3ffc4da83b9..72b0d594e75dd852b8002bcdb91b2c8034db5c3d 100644 (file)
--- a/resources/lang/zh_CN/validation.php
+++ b/resources/lang/zh_CN/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute 至少为:min个字符。',
         'array'   => ':attribute 至少有:min项。',
     ],
         'string'  => ':attribute 至少为:min个字符。',
         'array'   => ':attribute 至少有:min项。',
     ],

-    'no_double_extension'  => ':attribute 必须具有一个扩展名。',

     'not_in'               => '选中的 :attribute 无效。',
     'not_regex'            => ':attribute 格式错误。',
     'numeric'              => ':attribute 必须是一个数。',
     'not_in'               => '选中的 :attribute 无效。',
     'not_regex'            => ':attribute 格式错误。',
     'numeric'              => ':attribute 必须是一个数。',

diff --git a/resources/lang/zh_TW/validation.php b/resources/lang/zh_TW/validation.php
index 7a46288ad2664c3e9cd848817d1a169215b5ac0d..f8a7dac632e873edffa0dc9068e181fd8ac5b919 100644 (file)
--- a/resources/lang/zh_TW/validation.php
+++ b/resources/lang/zh_TW/validation.php
@@ -78,7 +78,6 @@ return [
         'string'  => ':attribute 至少為:min個字元。',
         'array'   => ':attribute 至少有:min項。',
     ],
         'string'  => ':attribute 至少為:min個字元。',
         'array'   => ':attribute 至少有:min項。',
     ],

-    'no_double_extension'  => 'The :attribute必須僅具有一個文件擴展名。',

     'not_in'               => '選中的 :attribute 無效。',
     'not_regex'            => 'The :attribute格式無效。',
     'numeric'              => ':attribute 必須是一個數。',
     'not_in'               => '選中的 :attribute 無效。',
     'not_regex'            => 'The :attribute格式無效。',
     'numeric'              => ':attribute 必須是一個數。',

diff --git a/tests/Uploads/ImageTest.php b/tests/Uploads/ImageTest.php
index 9b0e004b1f7a3cbe8718edc382eb40cbcfdcc581..55d580e46eab38b4d791419d2c0e274bf51164e9 100644 (file)
--- a/tests/Uploads/ImageTest.php
+++ b/tests/Uploads/ImageTest.php
@@ -165,7 +165,7 @@ class ImageTest extends TestCase
         $this->assertFalse(file_exists(public_path($relPath)), 'Uploaded php file was uploaded but should have been stopped');
     }
 
         $this->assertFalse(file_exists(public_path($relPath)), 'Uploaded php file was uploaded but should have been stopped');
     }
 

-    public function test_files_with_double_extensions_cannot_be_uploaded()
+    public function test_files_with_double_extensions_will_get_sanitized()

     {
         $page = Page::first();
         $admin = $this->getAdmin();
     {
         $page = Page::first();
         $admin = $this->getAdmin();


@@ -177,9 +177,17 @@ class ImageTest extends TestCase
 
         $file = $this->newTestImageFromBase64('bad-phtml-png.base64', $fileName);
         $upload = $this->withHeader('Content-Type', 'image/png')->call('POST', '/images/gallery', ['uploaded_to' => $page->id], [], ['file' => $file], []);
 
         $file = $this->newTestImageFromBase64('bad-phtml-png.base64', $fileName);
         $upload = $this->withHeader('Content-Type', 'image/png')->call('POST', '/images/gallery', ['uploaded_to' => $page->id], [], ['file' => $file], []);

-        $upload->assertStatus(302);
+        $upload->assertStatus(200);
+
+        $lastImage = Image::query()->latest('id')->first();
+        $newFileName = explode('.', basename($lastImage->path))[0];
+
+        $this->assertEquals($lastImage->name, 'bad-phtml.png');
+        $this->assertFalse(file_exists(public_path($relPath)), 'Uploaded image file name was not stripped of dots');
+
+        $this->assertTrue(strlen($newFileName) > 0, 'File name was reduced to nothing');

 
 

-        $this->assertFalse(file_exists(public_path($relPath)), 'Uploaded double extension file was uploaded but should have been stopped');
+        $this->deleteImage($lastImage->path);

     }
 
     public function test_url_entities_removed_from_filenames()
     }
 
     public function test_url_entities_removed_from_filenames()


@@ -428,4 +436,4 @@ class ImageTest extends TestCase
         $this->deleteImage($relPath);
     }
 
         $this->deleteImage($relPath);
     }
 

-}
\ No newline at end of file
+}