Uploaded image for project: 'eZ Publish / Platform'
  1. eZ Publish / Platform
  2. EZP-21357

Wildcards '*' not escaped for shell commands when using 'urlalias_iri' transformation group

    Details

      Description

      In a situation where a content object with an image attribute contains a wildcard/asterisk in its name (i.e: My Test Content*) and, site.ini, URLTranslator.TransformationGroup is set to urlalias_iri, generating image alias yields incorrect behavior, whereas multiple files for the same image alias are created exponentially.

      Steps to reproduce:

      1. Enable urlalias_iri, in site.ini:

      [URLTranslator]
      TransformationGroup=urlalias_iri
      

      2. Create a content object with a name ending in an asterisk, and include an image.
      3. View the image through admin interface or front-end, at this point image files should be generated (in, i.e, ezflow_site/storage/images/title*/...
      4. Clear your cache, and refresh the page where you are seeing the content object; at this point, additional files will be created for already existing image aliases, suffixed with a number. Repeating this step multiple times will create more image files exponentially.

        Issue Links

          Activity

          Show
          Patrick Allaert (Inactive) added a comment - PR available at: https://github.com/ezsystems/ezpublish-legacy/pull/730
          Show
          Patrick Allaert (Inactive) added a comment - Fixed in: eZ Publish master (merge commit): https://github.com/ezsystems/ezpublish-legacy/commit/4c2dc4afd0fa9662743859383155a83438bfb2f7 eZ Publish master: https://github.com/ezsystems/ezpublish-legacy/commit/e25d867a778836813dba67e7c110eb76c79263ae
          Hide
          Patrick Allaert (Inactive) added a comment -

          Important note:

          This fix requires the fix of EZP-21457.

          Show
          Patrick Allaert (Inactive) added a comment - Important note: This fix requires the fix of EZP-21457 .
          Hide
          Marcos Loureiro (Inactive) added a comment -

          Waiting on EZP-21457

          Show
          Marcos Loureiro (Inactive) added a comment - Waiting on EZP-21457
          Show
          Ricardo Correia (Inactive) added a comment - A known limitation regarding ImageMagick 6.5.4-7 has been added to eZ Publish requirements from version 4.6 to 5.x (master): https://confluence.ez.no/display/EZP/Requirements https://confluence.ez.no/display/EZP51/Requirements https://confluence.ez.no/display/EZP50/Requirements http://doc.ez.no/eZ-Publish/Technical-manual/4.7/Installation/Requirements http://doc.ez.no/eZ-Publish/Technical-manual/4.6/Installation/Requirements-4.6
          Hide
          Marcos Loureiro (Inactive) added a comment -

          QA Approved

          Show
          Marcos Loureiro (Inactive) added a comment - QA Approved
          Hide
          Yannick Roger (Inactive) added a comment -

          This patch introduces a regression, if you use it make sure to apply also EZP-21883 after this one.

          Show
          Yannick Roger (Inactive) added a comment - This patch introduces a regression, if you use it make sure to apply also EZP-21883 after this one.

            People

            • Assignee:
              Unassigned
              Reporter:
              Filipe Dobreira (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:

                Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 4 days, 2 hours, 15 minutes
                4d 2h 15m