go/imgproxy
1
0
Fork 0
mirror of https://github.com/imgproxy/imgproxy.git synced 2025-02-12 11:46:10 +02:00
Code Releases Activity

Fix possible infinite loop during SVG sanitization

Browse Source
This commit is contained in:
DarthSim 2022-10-28 21:00:51 +06:00
parent d07a016b66
commit a518b3a4d2
2 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
CHANGELOG.md
View File

@ -8,6 +8,7 @@
### Fix ### Fix
- Fix false-positive SVG detections. - Fix false-positive SVG detections.
- Fix possible infinite loop during SVG sanitization.
- (pro) Fix saving of GIF with variable frame delay to MP4. - (pro) Fix saving of GIF with variable frame delay to MP4.
## [3.9.0] - 2022-10-19 ## [3.9.0] - 2022-10-19

3
svg/svg.go
View File

@ -40,6 +40,9 @@ func Satitize(data *imagedata.ImageData) (*imagedata.ImageData, error) {
if ignoreTag > 0 { if ignoreTag > 0 {
switch tt { switch tt {
case xml.ErrorToken:
cancel()
return nil, l.Err()
case xml.EndTagToken, xml.StartTagCloseVoidToken: case xml.EndTagToken, xml.StartTagCloseVoidToken:
ignoreTag-- ignoreTag--
case xml.StartTagToken: case xml.StartTagToken: