CVE-2022-0940: Merge pull request #1629 from ajaysenr/master · star7th/showdoc@7852252

Permalink

Browse files

Merge pull request #1629 from ajaysenr/master

Update AttachmentModel.class.php

• Loading branch information

2 parents 830c89a + 52d1d90 commit 78522520892d4e29cc94148c6ec84a204a607b73

Showing with 1 addition and 0 deletions.

1. +1 −0 server/Application/Api/Model/AttachmentModel.class.php

@@ -304,6 +304,7 @@ public function isDangerFilename($filename){

|| $isDangerStr($filename , “%”)

|| $isDangerStr($filename , “.xml”)

|| $isDangerStr($filename , “.xxhtml”)

|| $isDangerStr($filename , “.aspx”)

) {

return true;

}

0 comments on commit 7852252

Please sign in to comment.