added SVG to forbidden file types in order to prevent possible XSS - …

…see https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2022-24588/CVE-2022-24588.pdf
flatpressblog · Dec 17, 2022 · 742f8b0 · 742f8b0
1 parent c4cc70e
commit 742f8b0
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/admin/panels/uploader/admin.uploader.php b/admin/panels/uploader/admin.uploader.php
@@ -95,7 +95,8 @@ function onupload() {
 			'jsp',
 			'htm',
 			'html',
-			'wml'
+			'wml',
+			'svg'
 		);
 
 		$imgs = array(