Serve stored images safely and drop committed uploads.

Browse Source

display.php takes the type from the image data, refuses anything else,
and sends nosniff. Remove the nine uploads in graphics/tmp.

...

This commit is contained in:

tim

2026-09-25 21:48:17 +02:00

parent c5ce7661f5

commit 1698680e24

11 changed files with 16 additions and 9 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

graphics/tmp/php364Gio

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/php8GGIZg

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/php9QtNxB

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/phpMNZnOJ

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/phpfNAkyA

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/phppdTpmq

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/phpsYP5eb

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/phpyeSYNT

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB

graphics/tmp/phpzypkkj

BIN

Binary file not shown.

Side by Side Before Width:  |  Height:  |  Size: 38 KiB