From 93c19e8c14d96320a8aa23269ebae134fd543464 Mon Sep 17 00:00:00 2001 From: Benjamin DALSASS Date: Thu, 26 Feb 2026 11:52:14 +0100 Subject: [PATCH] =?UTF-8?q?N=C2=B08612=20-=20[SECU]=20Insecure=20Access=20?= =?UTF-8?q?to=20Inline=20Images?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- pages/ajax.document.php | 1 + 1 file changed, 1 insertion(+) diff --git a/pages/ajax.document.php b/pages/ajax.document.php index 3320c298f..5421fa8bf 100644 --- a/pages/ajax.document.php +++ b/pages/ajax.document.php @@ -63,6 +63,7 @@ try { break; case 'download_inlineimage': + LoginWebPage::DoLoginEx(); // No login is required because the "secret" protects us // Benefit: the inline image can be inserted into any HTML (templating = $this->html(public_log)$) $id = utils::ReadParam('id', '');