Skip to content
Permalink
Browse files

Fixing empty space at the end of a file name allowing dangerous files…

… to be uploaded.

Thank you to math1as from l-team for the disclosure and fix.

#276
  • Loading branch information...
timbuckingham committed Apr 7, 2017
1 parent 4110a5b commit 8cf4212ea40e1b843e1aecf4b24681b0964ec04c
Showing with 1 addition and 1 deletion.
  1. +1 −1 core/inc/bigtree/apis/storage.php
@@ -8,7 +8,7 @@ class BigTreeStorage {
var $AutoJPEG = false;
var $DisabledFileError = false;
var $DisabledExtensionRegEx = '/\\.(exe|com|bat|php|rb|py|cgi|pl|sh|asp|aspx)$/i';
var $DisabledExtensionRegEx = '/\\.(exe|com|bat|php|rb|py|cgi|pl|sh|asp|aspx)/i';
var $Service = "";
var $Cloud = false;
var $Settings;

0 comments on commit 8cf4212

Please sign in to comment.
You can’t perform that action at this time.