This module contains a tweaked copy of ImageStyleDownloadController (used for the image.style_encrypt route).
This version of ImageStyleDownloadController does not seem to include the fix for
SA-CORE-2023-005 →
.
This fix should probably be applied to the version of ImageStyleDownloadController in file_encrypt.
Fixed
1.0
Code
It is used for security vulnerabilities which do not need a security advisory. For example, security issues in projects which do not have security advisory coverage, or forward-porting a change already disclosed in a security advisory. See Drupal’s security advisory policy for details. Be careful publicly disclosing security vulnerabilities! Use the “Report a security vulnerability” link in the project page’s sidebar. See how to report a security issue for details.