File upload fixes via link
Files uploaded via external links are now saved with their original name and extension (in version 1.0.7 they were saved as solverweb_XXXX without an extension and were not recognized as images).
Links with redirects, such as HTTP to HTTPS, are supported again.
A fatal PHP 8 error when saving a single (non-multiple) field passed as a string link has been fixed.
When saving files uploaded via link, compression by the dev2fun.imagecompress module (if installed) is temporarily disabled: importing large galleries no longer times out.
Security
Arbitrary file IDs and local paths within /upload in the field value are accepted only from administrators or via CLI; other users can only access files already attached to the field.
Temporary files from users without administrator rights are accepted only from the standard uploader folder of the current session; files with script extensions are rejected.
Upload via link: each redirect is checked separately (only HTTP and HTTPS, ports 80 and 443, only public addresses); the 100.64.0.0/10 range and IPv4 addresses embedded in IPv6 addresses are blocked.
Upload via link: the file is written directly to disk; responses over 50 MB are discarded; no more than 100 links are processed per save.