tim
1698680e24
display.php takes the type from the image data, refuses anything else, and sends nosniff. Remove the nine uploads in graphics/tmp.
6 lines
147 B
Plaintext
6 lines
147 B
Plaintext
# Local configuration and secrets (see .env.example)
|
|
.env
|
|
|
|
# Old upload directory; uploads now go to UPLOAD_DIR outside the web root
|
|
graphics/tmp/
|