A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More.
search
AI OnAI Off
Hi
This is a similar issue to this: http://world.episerver.com/Forum/Developer-forum/ImageVault/Thread-Container/2014/4/View-image-without-be-logged-in/
But in my case it's when the editor selects a document (.pdf) in the XHTML property through the imagevault toolbar button.
The link to the document gets generated with the internal */media/* url. Is this expected or should the editors add the documents in another way?
As a quick work around I have changed so that the path="imagevault/media/*/* goes through the PublishedMediaProxyHandler, and this solves the problem of course. What complications could come from doing this?
Thanks in advance!
/Fred