![]() Server : Apache/2.4.62 (Unix) OpenSSL/1.0.2k-fips System : Linux server1.richineiserver.com 3.10.0-1160.119.1.el7.x86_64 #1 SMP Tue Jun 4 14:43:51 UTC 2024 x86_64 User : fdshops ( 1003) PHP Version : 8.2.21 Disable Function : NONE Directory : /home/fdshops/public_html/vendor/mpdf/mpdf/src/File/ |
<?php namespace Mpdf\File; use Mpdf\Mpdf; final class StreamWrapperChecker { private $mpdf; public function __construct(Mpdf $mpdf) { $this->mpdf = $mpdf; } /** * @param string $filename * @return bool * @since 7.1.8 */ public function hasBlacklistedStreamWrapper($filename) { if (strpos($filename, '://') > 0) { $wrappers = stream_get_wrappers(); $whitelistStreamWrappers = $this->getWhitelistedStreamWrappers(); foreach ($wrappers as $wrapper) { if (in_array($wrapper, $whitelistStreamWrappers)) { continue; } if (stripos($filename, $wrapper . '://') === 0) { return true; } } } return false; } public function getWhitelistedStreamWrappers() { return array_diff($this->mpdf->whitelistStreamWrappers, ['phar']); // remove 'phar' (security issue) } }