fix CVE-2023-25654

戻り値が変更されてしまう挙動を修正
baserproject · Mar 10, 2023 · 002886b · 002886b
1 parent 60f8305
commit 002886b
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/lib/Baser/Model/BcAppModel.php b/lib/Baser/Model/BcAppModel.php
@@ -945,7 +945,7 @@ public function fileExt($check, $exts)
 		}
 
 		// 更新時の文字列チェック
-		if (is_string($file)) {
+		if (!empty($file) && is_string($file)) {
 			$ext = pathinfo($file, PATHINFO_EXTENSION);
 			if (!in_array($ext, $exts)) {
 				return false;