tim/xxx
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Refuse an upload name that ends in a new line.

Browse Source
This commit is contained in:
tim
2026-09-26 03:48:09 +02:00
parent a23f07cc48
commit 7d8cd8a89d
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
get_data.lib.php
+1 -1
View File
@@ -374,7 +374,7 @@ function upload_dir() {
} }
function is_upload_name($name) { function is_upload_name($name) {
return is_string($name) && preg_match('/^[0-9a-f]{32}$/', $name); return is_string($name) && preg_match('/^[0-9a-f]{32}\z/', $name);
} }
/* /*