[VD:LocalFileSystem] fix #3615 Using .php8 in PHP handler leading to RCE

Studio-42 · Dec 19, 2023 · d2fce10 · d2fce10
1 parent 15bfec8
commit d2fce10
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/php/elFinderVolumeDriver.class.php b/php/elFinderVolumeDriver.class.php
@@ -280,6 +280,8 @@ abstract class elFinderVolumeDriver
             'php4:*' => 'text/x-php',
             'php5:*' => 'text/x-php',
             'php7:*' => 'text/x-php',
+            'php8:*' => 'text/x-php',
+            'php9:*' => 'text/x-php',
             'phtml:*' => 'text/x-php',
             'phar:*' => 'text/x-php',
             'cgi:*' => 'text/x-httpd-cgi',