Changeset [148790795acba350fc42bd236b7f0da4a6e0e10e] by dleffler

December 26th, 2015 @ 05:56 PM

Fix security issue by strengthening the server security parameters in folders receiving uploads and tighten elFinder security by not allow any files to be opened (only folders)...you'll need to use the 'preview' or 'edit' commands or click on the link in the 'info' dialog which will enforce the server security settings.[#1323 state:resolved]
https://github.com/exponentcms/exponent-cms/commit/148790795acba350...

Committed by dleffler

  • A framework/modules/file/connector/open.js
  • M cron/.htaccess
  • M files/.htaccess
  • M files/avatars/.htaccess
  • M files/uploads/.htaccess
  • M framework/modules/file/views/file/elfinder.tpl
New-ticket Create new ticket

Create your profile

Help contribute to this project by taking a few moments to create your personal profile. Create your profile ยป

Bug Tracker for Exponent CMS

Shared Ticket Bins