Changeset 310

Show
Ignore:
Timestamp:
2007-05-18 23:42:43 (3 years ago)
Author:
alfonsoml
Message:

Deny the upload of "sh", "shtml", "shtm" and "phtm". Issue #273. Patch for trunk

Location:
FCKeditor/trunk
Files:
11 modified

Legend:

Unmodified
Added
Removed

  • FCKeditor/trunk/editor/filemanager/browser/default/connectors/asp/config.asp

    r132 r310  
    3636 
    3737ConfigAllowedExtensions.Add     "File", "" 
    38 ConfigDeniedExtensions.Add      "File", "html|htm|php|php2|php3|php4|php5|phtml|pwml|inc|asp|aspx|ascx|jsp|cfm|cfc|pl|bat|exe|com|dll|vbs|js|reg|cgi|htaccess|asis" 
     38ConfigDeniedExtensions.Add      "File", "html|htm|php|php2|php3|php4|php5|phtml|pwml|inc|asp|aspx|ascx|jsp|cfm|cfc|pl|bat|exe|com|dll|vbs|js|reg|cgi|htaccess|asis|sh|shtml|shtm|phtm" 
    3939 
    4040ConfigAllowedExtensions.Add     "Image", "jpg|gif|jpeg|png|bmp" 

  • FCKeditor/trunk/editor/filemanager/browser/default/connectors/cfm/config.cfm

    r132 r310  
    3535        // config.allowedExtensions["File"] = "doc,rtf,pdf,ppt,pps,xls,csv,vnd,zip"; 
    3636        config.allowedExtensions["File"] = ""; 
    37         config.deniedExtensions["File"] = "html,htm,php,php2,php3,php4,php5,phtml,pwml,inc,asp,aspx,ascx,jsp,cfm,cfc,pl,bat,exe,com,dll,vbs,js,reg,cgi,htaccess,asis"; 
     37        config.deniedExtensions["File"] = "html,htm,php,php2,php3,php4,php5,phtml,pwml,inc,asp,aspx,ascx,jsp,cfm,cfc,pl,bat,exe,com,dll,vbs,js,reg,cgi,htaccess,asis,sh,shtml,shtm,phtm"; 
    3838 
    3939        config.allowedExtensions["Image"] = "png,gif,jpg,jpeg,bmp"; 

  • FCKeditor/trunk/editor/filemanager/browser/default/connectors/lasso/config.lasso

    r132 r310  
    5757                ), 
    5858                'DeniedExtensions' = map( 
    59                         'File' = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','lasso','lassoapp','htaccess','asis'), 
     59                        'File' = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','lasso','lassoapp','htaccess','asis','sh','shtml','shtm','phtm'), 
    6060                        'Image' = array(), 
    6161                        'Flash' = array(), 

  • FCKeditor/trunk/editor/filemanager/browser/default/connectors/php/config.php

    r183 r310  
    4747 
    4848$Config['AllowedExtensions']['File']    = array() ; 
    49 $Config['DeniedExtensions']['File']             = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','htaccess','asis') ; 
     49$Config['DeniedExtensions']['File']             = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','htaccess','asis','sh','shtml','shtm','phtm') ; 
    5050 
    5151$Config['AllowedExtensions']['Image']   = array('jpg','gif','jpeg','png') ; 

  • FCKeditor/trunk/editor/filemanager/browser/default/connectors/py/connector.py

    r132 r310  
    178178                                } 
    179179                self.deniedExtensions = { 
    180                                 "File": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis" ], 
    181                                 "Image": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis" ], 
    182                                 "Flash": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis" ], 
    183                                 "Media": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis" ] 
     180                                "File": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis","sh","shtml","shtm","phtm" ], 
     181                                "Image": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis","sh","shtml","shtm","phtm" ], 
     182                                "Flash": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis","sh","shtml","shtm","phtm" ], 
     183                                "Media": [ "html","htm","php","php2","php3","php4","php5","phtml","pwml","inc","asp","aspx","ascx","jsp","cfm","cfc","pl","bat","exe","com","dll","vbs","js","reg","cgi","htaccess","asis","sh","shtml","shtm","phtm" ] 
    184184                                } 
    185185 

  • FCKeditor/trunk/editor/filemanager/upload/asp/config.asp

    r132 r310  
    4242 
    4343ConfigAllowedExtensions.Add     "File", "" 
    44 ConfigDeniedExtensions.Add      "File", "html|htm|php|php2|php3|php4|php5|phtml|pwml|inc|asp|aspx|ascx|jsp|cfm|cfc|pl|bat|exe|com|dll|vbs|js|reg|cgi|htaccess|asis" 
     44ConfigDeniedExtensions.Add      "File", "html|htm|php|php2|php3|php4|php5|phtml|pwml|inc|asp|aspx|ascx|jsp|cfm|cfc|pl|bat|exe|com|dll|vbs|js|reg|cgi|htaccess|asis|sh|shtml|shtm|phtm" 
    4545 
    4646ConfigAllowedExtensions.Add     "Image", "jpg|gif|jpeg|png|bmp" 

  • FCKeditor/trunk/editor/filemanager/upload/cfm/config.cfm

    r132 r310  
    3737 
    3838        config.allowedExtensions["File"] = ""; 
    39         config.deniedExtensions["File"] = "html,htm,php,php2,php3,php4,php5,phtml,pwml,inc,asp,aspx,ascx,jsp,cfm,cfc,pl,bat,exe,com,dll,vbs,js,reg,cgi,htaccess,asis"; 
     39        config.deniedExtensions["File"] = "html,htm,php,php2,php3,php4,php5,phtml,pwml,inc,asp,aspx,ascx,jsp,cfm,cfc,pl,bat,exe,com,dll,vbs,js,reg,cgi,htaccess,asis,sh,shtml,shtm,phtm"; 
    4040 
    4141        config.allowedExtensions["Image"] = "png,gif,jpg,jpeg,bmp"; 

  • FCKeditor/trunk/editor/filemanager/upload/lasso/config.lasso

    r132 r310  
    5757                ), 
    5858                'DeniedExtensions' = map( 
    59                         'File' = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','lasso','lassoapp','htaccess','asis'), 
     59                        'File' = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','lasso','lassoapp','htaccess','asis','sh','shtml','shtm','phtm'), 
    6060                        'Image' = array(), 
    6161                        'Flash' = array(), 

  • FCKeditor/trunk/editor/filemanager/upload/php/config.php

    r132 r310  
    4646 
    4747$Config['AllowedExtensions']['File']    = array() ; 
    48 $Config['DeniedExtensions']['File']             = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','htaccess','asis') ; 
     48$Config['DeniedExtensions']['File']             = array('html','htm','php','php2','php3','php4','php5','phtml','pwml','inc','asp','aspx','ascx','jsp','cfm','cfc','pl','bat','exe','com','dll','vbs','js','reg','cgi','htaccess','asis','sh','shtml','shtm','phtm') ; 
    4949 
    5050$Config['AllowedExtensions']['Image']   = array('jpg','gif','jpeg','png') ; 

  • FCKeditor/trunk/fckconfig.js

    r255 r310  
    213213FCKConfig.LinkUploadURL = FCKConfig.BasePath + 'filemanager/upload/' + _QuickUploadLanguage + '/upload.' + _QuickUploadLanguage ; 
    214214FCKConfig.LinkUploadAllowedExtensions   = "" ;                  // empty for all 
    215 FCKConfig.LinkUploadDeniedExtensions    = ".(html|htm|php|php2|php3|php4|php5|phtml|pwml|inc|asp|aspx|ascx|jsp|cfm|cfc|pl|bat|exe|com|dll|vbs|js|reg|cgi|htaccess|asis)$" ;     // empty for no one 
     215FCKConfig.LinkUploadDeniedExtensions    = ".(html|htm|php|php2|php3|php4|php5|phtml|pwml|inc|asp|aspx|ascx|jsp|cfm|cfc|pl|bat|exe|com|dll|vbs|js|reg|cgi|htaccess|asis|sh|shtml|shtm|phtm)$" ;  // empty for no one 
    216216 
    217217FCKConfig.ImageUpload = true ; 

  • FCKeditor/trunk/_whatsnew.html

    r309 r310  
    9191                        not create invalid nested block elements, like creating <form> or <hr> 
    9292                        inside &lt;p&gt;.</li> 
     93                <li>>[<a target="_blank" href="http://dev.fckeditor.net/ticket/273">#273</a>] The extensions  
     94                        "sh", "shtml", "shtm" and "phtm" have been added to the list of denied extensions on  
     95                        upload.</li> 
    9396        </ul> 
    9497        <h3>