Avoid exposure of local path in PNG thumbnails

Bug: T108616
Change-Id: I952068d2d175d71f86dec0dbb92af5a122c05a49

diff --git a/includes/media/Bitmap.php b/includes/media/Bitmap.php
index 692e5a6..faf40b3 100644 (file)
--- a/includes/media/Bitmap.php
+++ b/includes/media/Bitmap.php
@@ -161,6 +161,8 @@ class BitmapHandler extends TransformationalImageHandler {
                        ( $params['comment'] !== ''
                                ? array( '-set', 'comment', $this->escapeMagickProperty( $params['comment'] ) )
                                : array() ),
+                       // T108616: Avoid exposure of local file path
+                       array( '+set', 'Thumb::URI' ),
                        array( '-depth', 8 ),
                        $sharpen,
                        array( '-rotate', "-$rotation" ),