RSS Feed/News Non-atomic SVG sprite writes can cause corrupted CDN-cached icons

Status
Not open for further replies.

ENXF NET

Administrator
Staff member
Administrator
Moderator
+Lifetime VIP+
S.V.I.P.S Member
S.V.I.P Member
V.I.P Member
Collaborate
Registered
Joined
Nov 13, 2018
Messages
33,400
Points
823

Reputation:

XF writes icon sprite files directly. If the file is requested while it is being regenerated, the server can return an incomplete SVG, which may then be cached by the CDN and break icons

SpriteGeneratorService::generateForVariant() uses file_put_contents() without atomic file replacement allowing partially written files to be served

Continue reading...
 
Status
Not open for further replies.
Top