Validate image scaling dimensions

Ensure we pass only integers and they are not too big.

Signed-off-by: Michal Čihař <michal@cihar.com>

1 files changed, 12 insertions, 1 deletions

diff --git a/transformation_wrapper.php b/transformation_wrapper.php
index bd3d9f987c..b879a7206f 100644
--- a/transformation_wrapper.php
+++ b/transformation_wrapper.php
@@ -36,9 +36,20 @@ $request_params = array(
     'transform_key',
     'where_clause'
 );
+$size_params = array(
+    'newHeight',
+    'newWidth',
+);
 foreach ($request_params as $one_request_param) {
     if (isset($_REQUEST[$one_request_param])) {
-        $GLOBALS[$one_request_param] = $_REQUEST[$one_request_param];
+        if (in_array($one_request_param, $size_params)) {
+            $GLOBALS[$one_request_param] = intval($_REQUEST[$one_request_param]);
+            if ($GLOBALS[$one_request_param] > 2000) {
+                $GLOBALS[$one_request_param] = 2000;
+            }
+        } else {
+            $GLOBALS[$one_request_param] = $_REQUEST[$one_request_param];
+        }
     }
 }