D3Public/pdfdokumente
8
0
Fork 0
Code Pull Requests Releases Activity

prevent malicious versions of HTML2PDF library

Browse Source
This commit is contained in:
Daniel Seifert
2025-05-14 21:15:52 +02:00
parent c097e06ac1
commit 6cc376125a
2 changed files with 2 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
Application/Model/AbstractClasses/pdfdocumentsGeneric.php
View File

@ -71,9 +71,6 @@ abstract class pdfdocumentsGeneric extends Base implements genericInterface
public function genPdf($sFilename, $iSelLang = 0, $target = self::PDF_DESTINATION_STDOUT)
{
$oPdf = oxNew(Html2Pdf::class, ...$this->getPdfProperties());
$oPdf->getSecurityService()->addAllowedHost(
parse_url(Registry::getConfig()->getShopCurrentUrl())['host']
);
$oPdf->setTestIsImage(false);
$htmlContent = $this->getHTMLContent($iSelLang);

2
composer.json
View File

@ -33,7 +33,7 @@
"require": {
"php": "^7.0 || ^8.0",
"oxid-esales/oxideshop-ce": "6.3 - 6.14",
"spipu/html2pdf": "^5.2",
"spipu/html2pdf": "~5.2.8",
"d3/modcfg": "^5.3.6.000 || ^6",
"beberlei/assert": "^3.3.2"
},