From bc5ae5c74e2bf0240a026828731198b5e85c1447 Mon Sep 17 00:00:00 2001 From: Uwe Steinmann Date: Wed, 30 Jul 2025 08:55:19 +0200 Subject: [PATCH 1/2] more changes of 5.1.41 --- CHANGELOG | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG b/CHANGELOG index 24bcc52f0..70220693d 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -16,7 +16,7 @@ already (in menu task list and document list) - break long original file names on viewDocument page - fix potential XSS attack in many fields of settings -- allow to edit original filename +- allow to edit original filename, check filename for problematic chars -------------------------------------------------------------------------------- Changes in version 5.1.40 From b6dae52f35fd316fc1efb19c807bf1a4731f55ef Mon Sep 17 00:00:00 2001 From: Uwe Steinmann Date: Wed, 30 Jul 2025 09:03:13 +0200 Subject: [PATCH 2/2] check orig filename only if admin --- views/bootstrap/class.ViewDocument.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/views/bootstrap/class.ViewDocument.php b/views/bootstrap/class.ViewDocument.php index e15530bfa..87b2b6087 100644 --- a/views/bootstrap/class.ViewDocument.php +++ b/views/bootstrap/class.ViewDocument.php @@ -753,7 +753,7 @@ $(document).ready( function() { } else { print htmlspecialchars($latestContent->getOriginalFileName()); } - if(!$latestContent->checkOriginalFileName()) { + if($user->isAdmin() && !$latestContent->checkOriginalFileName()) { echo " "; } print "\n";