mirror of
https://github.com/SydMontague/ImageMaps.git
synced 2024-11-01 08:19:46 +01:00
fa6588be58
Any file could be downloaded as long as the webserver claimed they were images. This can allow a compromised or malicious server to serve any kind of data to the requesting server, including executable code. The risk for this being exploited is very minimal, the downloaded files can't be executed or used for anything malicious without either another exploit or additional actions by a malicious, compromised or non-suspecting user. Nethertheless, this update adds an additional verification layer making sure the downloaded file is a valid image file. It additionally stores the image as PNG on disk, regardless of the filetype of the download, stripping the file of potential "baggage" as you might find in polyglot files. As a general rule of thumb you should * always use a secure connection to download files (https) * only give trusted and properly secured users access to the download functionality * only download from trusted sites * preferably upload the images manually
115 lines
3.4 KiB
XML
115 lines
3.4 KiB
XML
<project xmlns="http://maven.apache.org/POM/4.0.0"
|
|
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
|
|
xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
|
|
<modelVersion>4.0.0</modelVersion>
|
|
<groupId>net.craftcitizen</groupId>
|
|
<artifactId>imagemaps</artifactId>
|
|
<version>1.0.6</version>
|
|
<name>ImageMaps</name>
|
|
<description>Render Images onto maps!</description>
|
|
|
|
<distributionManagement>
|
|
<repository>
|
|
<id>github</id>
|
|
<name>GitHub ImageMaps Packages</name>
|
|
<url>https://maven.pkg.github.com/SydMontague/ImageMaps</url>
|
|
</repository>
|
|
</distributionManagement>
|
|
|
|
<properties>
|
|
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
|
|
</properties>
|
|
|
|
<repositories>
|
|
<repository>
|
|
<id>spigot-repo</id>
|
|
<url>http://hub.spigotmc.org/nexus/content/groups/public/</url>
|
|
</repository>
|
|
<repository>
|
|
<id>github</id>
|
|
<name>GitHub CLCore Packages</name>
|
|
<url>https://maven.pkg.github.com/SydMontague/CLCore</url>
|
|
</repository>
|
|
</repositories>
|
|
|
|
<dependencies>
|
|
<dependency>
|
|
<groupId>org.spigotmc</groupId>
|
|
<artifactId>spigot-api</artifactId>
|
|
<version>1.16.1-R0.1-SNAPSHOT</version>
|
|
</dependency>
|
|
|
|
<dependency>
|
|
<groupId>de.craftlancer</groupId>
|
|
<artifactId>clcore</artifactId>
|
|
<version>0.4.0-SNAPSHOT</version>
|
|
<exclusions>
|
|
<exclusion>
|
|
<artifactId>*</artifactId>
|
|
<groupId>*</groupId>
|
|
</exclusion>
|
|
</exclusions>
|
|
</dependency>
|
|
</dependencies>
|
|
|
|
<build>
|
|
<resources>
|
|
<resource>
|
|
<directory>${basedir}/src/main/resources</directory>
|
|
<filtering>true</filtering>
|
|
</resource>
|
|
</resources>
|
|
<finalName>${project.name}</finalName>
|
|
<plugins>
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-shade-plugin</artifactId>
|
|
<version>3.2.4</version>
|
|
<configuration>
|
|
<filters>
|
|
<filter>
|
|
<artifact>de.craftlancer:clcore</artifact>
|
|
<includes>
|
|
<include>de/craftlancer/core/command/*</include>
|
|
<include>de/craftlancer/core/util/*</include>
|
|
<include>de/craftlancer/core/LambdaRunnable*</include>
|
|
<include>de/craftlancer/core/Utils*</include>
|
|
<include>de/craftlancer/core/SemanticVersion*</include>
|
|
</includes>
|
|
</filter>
|
|
</filters>
|
|
<artifactSet>
|
|
<includes>
|
|
<include>de.craftlancer:clcore</include>
|
|
</includes>
|
|
</artifactSet>
|
|
<relocations>
|
|
<relocation>
|
|
<pattern>de.craftlancer.core</pattern>
|
|
<shadedPattern>net.craftcitizen.imagemaps.clcore</shadedPattern>
|
|
</relocation>
|
|
</relocations>
|
|
</configuration>
|
|
<executions>
|
|
<execution>
|
|
<phase>package</phase>
|
|
<goals>
|
|
<goal>shade</goal>
|
|
</goals>
|
|
</execution>
|
|
</executions>
|
|
</plugin>
|
|
|
|
<plugin>
|
|
<groupId>org.apache.maven.plugins</groupId>
|
|
<artifactId>maven-compiler-plugin</artifactId>
|
|
<version>3.8.1</version>
|
|
<configuration>
|
|
<source>1.8</source>
|
|
<target>1.8</target>
|
|
</configuration>
|
|
</plugin>
|
|
|
|
</plugins>
|
|
</build>
|
|
</project> |