Home
last modified time | relevance | path

Searched hist:"26 ceae189b2d0a31062ca1f26577545b78250281" (Results 1 – 5 of 5) sorted by relevance

/dokuwiki/lib/plugins/config/lang/en/
H A Dlang.php26ceae189b2d0a31062ca1f26577545b78250281 Sat Feb 24 12:44:58 UTC 2007 Andreas Gohr <andi@splitbrain.org> Test uploaded files for HTML tags FS#1077

Following the problem with IE's mimetype handling described at
http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting
this patch adds a new option (on by default) to check the first 256
bytes of uploaded files against a list of a few HTML tags and denies
the upload of such a file. In rare occasions this may block harmless
and valid files, but that's price we have to pay for Microsoft's
stupidity.

Users who need HTML uploads should disable this check. (Don't do that on
open Wikis!)

darcs-hash:20070224124458-7ad00-0ced616d06f563515b36a0a6871b5ba50229c946.gz

/dokuwiki/lib/plugins/config/settings/
H A Dconfig.metadata.php26ceae189b2d0a31062ca1f26577545b78250281 Sat Feb 24 12:44:58 UTC 2007 Andreas Gohr <andi@splitbrain.org> Test uploaded files for HTML tags FS#1077

Following the problem with IE's mimetype handling described at
http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting
this patch adds a new option (on by default) to check the first 256
bytes of uploaded files against a list of a few HTML tags and denies
the upload of such a file. In rare occasions this may block harmless
and valid files, but that's price we have to pay for Microsoft's
stupidity.

Users who need HTML uploads should disable this check. (Don't do that on
open Wikis!)

darcs-hash:20070224124458-7ad00-0ced616d06f563515b36a0a6871b5ba50229c946.gz

/dokuwiki/conf/
H A Ddokuwiki.php26ceae189b2d0a31062ca1f26577545b78250281 Sat Feb 24 12:44:58 UTC 2007 Andreas Gohr <andi@splitbrain.org> Test uploaded files for HTML tags FS#1077

Following the problem with IE's mimetype handling described at
http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting
this patch adds a new option (on by default) to check the first 256
bytes of uploaded files against a list of a few HTML tags and denies
the upload of such a file. In rare occasions this may block harmless
and valid files, but that's price we have to pay for Microsoft's
stupidity.

Users who need HTML uploads should disable this check. (Don't do that on
open Wikis!)

darcs-hash:20070224124458-7ad00-0ced616d06f563515b36a0a6871b5ba50229c946.gz

/dokuwiki/inc/lang/en/
H A Dlang.php26ceae189b2d0a31062ca1f26577545b78250281 Sat Feb 24 12:44:58 UTC 2007 Andreas Gohr <andi@splitbrain.org> Test uploaded files for HTML tags FS#1077

Following the problem with IE's mimetype handling described at
http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting
this patch adds a new option (on by default) to check the first 256
bytes of uploaded files against a list of a few HTML tags and denies
the upload of such a file. In rare occasions this may block harmless
and valid files, but that's price we have to pay for Microsoft's
stupidity.

Users who need HTML uploads should disable this check. (Don't do that on
open Wikis!)

darcs-hash:20070224124458-7ad00-0ced616d06f563515b36a0a6871b5ba50229c946.gz

/dokuwiki/inc/
H A Dmedia.php26ceae189b2d0a31062ca1f26577545b78250281 Sat Feb 24 12:44:58 UTC 2007 Andreas Gohr <andi@splitbrain.org> Test uploaded files for HTML tags FS#1077

Following the problem with IE's mimetype handling described at
http://www.splitbrain.org/blog/2007-02/12-internet_explorer_facilitates_cross_site_scripting
this patch adds a new option (on by default) to check the first 256
bytes of uploaded files against a list of a few HTML tags and denies
the upload of such a file. In rare occasions this may block harmless
and valid files, but that's price we have to pay for Microsoft's
stupidity.

Users who need HTML uploads should disable this check. (Don't do that on
open Wikis!)

darcs-hash:20070224124458-7ad00-0ced616d06f563515b36a0a6871b5ba50229c946.gz