Changeset [148790795acba350fc42bd236b7f0da4a6e0e10e] by dleffler
Revision 148790795acba350fc42bd236b7f0da4a6e0e10e,
committed by dleffler
· December 26th, 2015 @ 05:56 PM
Fix security issue by strengthening the server security
parameters in folders receiving uploads and tighten elFinder
security by not allow any files to be opened (only
folders)...you'll need to use the 'preview' or 'edit' commands or
click on the link in the 'info' dialog which will enforce the
server security settings.[#1323 state:resolved]
https://github.com/exponentcms/exponent-cms/commit/148790795acba350...
6 changed files
-
A
framework/modules/file/connector/open.js -
M
cron/.htaccess -
M
files/.htaccess -
M
files/avatars/.htaccess -
M
files/uploads/.htaccess -
M
framework/modules/file/views/file/elfinder.tpl