beenull/forkbb
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Prohibit SVG, at the moment is unsafe

Browse source
This commit is contained in:
Visman 2023-07-10 00:14:14 +07:00
parent fd625f45b5
commit ca04b877f4
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
app/Models/Attachment/Attachments.php
View file

@ -21,7 +21,7 @@ use RuntimeException;
class Attachments extends Manager
{
const HTML_CONT = '<!DOCTYPE html><html lang="en"><head><title>.</title></head><body>.</body></html>';
const BAD_EXTS = '%^(?:php.*|phar|[ps]?html?|jsp?|htaccess|htpasswd|f?cgi|)$%i';
const BAD_EXTS = '%^(?:php.*|phar|[ps]?html?|jsp?|htaccess|htpasswd|f?cgi|svg|)$%i';
const FOLDER = '/upload/';
/**