SA-CORE-2023-005 →
fixes a security issue in ImageStyleDownloadController.
The avif module overrides this controller, so it probably needs to apply the same fix.
The patch from 🐛 SA-CORE-2023-005 fix probably needs to be applied similarly on WebP module's code Needs review can probably be adapted to avif.
Closed: outdated
1.0
Code
It is used for security vulnerabilities which do not need a security advisory. For example, security issues in projects which do not have security advisory coverage, or forward-porting a change already disclosed in a security advisory. See Drupal’s security advisory policy for details. Be careful publicly disclosing security vulnerabilities! Use the “Report a security vulnerability” link in the project page’s sidebar. See how to report a security issue for details.
Probably simpler to run with 📌 Simplify ImageStyleDownloadController by decorating core Needs review instead.
This is no longer applicable since 📌 Simplify ImageStyleDownloadController by decorating core Needs review .