Skip to content

Remove uses of get_file.php for non-old-DQT modules #10432

@MaximeBICMTL

Description

@MaximeBICMTL

As discussed in the meetings, the get_file.php endpoint is unsecure to use outside of the old DQT. Unfortunately, it is currently used by some other modules, so the uses of this endpoint in those modules need to be removed.

I did not manage to make an URL out of a GitHub code search (if someone knows how to please show me!) but I could find the following uses that beed to be removed (see screen below):

  • Electrophysiology browser
  • DICOM archive
  • Imaging browser

Solution:

  • Use the API instead (hopefully all endpoints are available).

Screenshot:
Image

Metadata

Metadata

Assignees

Labels

Category: SecurityPR or issue that aims to improve securityCritical to releasePR or issue is key for the release to which it has been assigned

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions