joshuacoles/wallos
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: file upload bypass vulnerability (#181)

Browse Source
This commit is contained in:
Miguel Ribeiro
2024-03-02 15:58:22 +01:00
committed by GitHub
parent 2496cd7114
commit 0f7853f961
6 changed files with 39 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
index.php
+1 -1
View File
@@ -135,7 +135,7 @@
<label for="logo" class="logo-preview">
<img src="" alt="<?= translate('logo_preview', $i18n) ?>" id="form-logo">
</label>
<input type="file" id="logo" name="logo" accept="image/jpeg, image/png" onchange="handleFileSelect(event)" class="hidden-input">
<input type="file" id="logo" name="logo" accept="image/jpeg, image/png, image/gif, image/webp" onchange="handleFileSelect(event)" class="hidden-input">
<input type="hidden" id="logo-url" name="logo-url">
<div id="logo-search-button" class="image-button medium disabled" title="<?= translate('search_logo', $i18n) ?>" onClick="searchLogo()">
<img src="images/siteicons/websearch.png">