From 458a996c29db73b9ce2d374f6ce8b90c36351159 Mon Sep 17 00:00:00 2001 From: Benjamin DALSASS Date: Mon, 23 Mar 2026 15:49:04 +0100 Subject: [PATCH] =?UTF-8?q?N=C2=B08612=20-=20force=20authentication=20for?= =?UTF-8?q?=20inline=20image=20endpoints=20-=20ajax.render=20dict=20route?= =?UTF-8?q?=20needs=20to=20be=20reached=20without=20login=20authentication?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pages/ajax.document.php | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/pages/ajax.document.php b/pages/ajax.document.php index 69c9d0a03d..3278d8e363 100644 --- a/pages/ajax.document.php +++ b/pages/ajax.document.php @@ -34,7 +34,6 @@ try { require_once(APPROOT.'/application/startup.inc.php'); require_once(APPROOT.'/application/loginwebpage.class.inc.php'); - LoginWebPage::DoLoginEx(); IssueLog::Trace('----- Request: '.utils::GetRequestUri(), LogChannels::WEB_REQUEST); @@ -45,6 +44,7 @@ try { switch ($operation) { case 'download_document': + LoginWebPage::DoLoginEx(); $id = utils::ReadParam('id', ''); $sField = utils::ReadParam('field', ''); if ($sClass == 'Attachment') { @@ -64,6 +64,7 @@ try { break; case 'download_inlineimage': + LoginWebPage::DoLoginEx(); $id = utils::ReadParam('id', ''); $sSecret = utils::ReadParam('s', ''); $iCacheSec = 31556926; // One year ahead: an inline image cannot change