If you have a Windows operating system and want to select an image in Helix, and you need to access a folder to do so, you'll see the following message:
"The most recent request was denied because it had an invalid security token. Please refresh the page and try again." While the problem appears to be the security token, our investigation revealed the issue to be "Invalid media path." This led us to helper.php, specifically to the resolveMediaPath method on line 957, which contains:
if ($fullPath === $allowedPath || strpos($fullPath, $allowedPath . '/') === 0) {
To fix this bug, it should be changed to:
if ($fullPath === $allowedPath || strpos($fullPath, $allowedPath . DIRECTORY_SEPARATOR) === 0) {
Or, you can implement the same fix found in Media.php using str_replace.
I hope this solution is included in a new version as soon as possible; we Windows lovers are suffering from it.
Regards
