This is a follow-up to https://www.drupal.org/sa-contrib-2022-034, where we identified that the same vulnerability does not exist in Backdrop core. We would like to include the same sanitization tests, so that we can continue to test sanitization against any future changes to link handling.
GitHub Issue #:
5613
Recent comments
Hi Martin, Double-check that your ../private/downloads folder has proper permissions for the web server and that the uploaded file is correctly linked to the product SKU. Make sure the...
Ubercart and downloadable file product
We released version 1.32.1 of Backdrop CMS on October 7th to address some of the bugs reported in version 1.32.0. https://github.com/backdrop/backdrop/releases/tag/1.32.1
Backdrop CMS 1.32.0 Upgrade Issues or Feedback
To be very clear: Backdrop does NOT need composer and never will. While some use composer with Backdrop it is NOT required.
Class "FileStorageController" not found