Make WordPress Core

Changes between Initial Version and Version 1 of Ticket #57242, comment 4


Ignore:
Timestamp:
12/02/2022 04:29:12 PM (3 years ago)
Author:
SergeyBiryukov
Comment:

Legend:

Unmodified
Added
Removed
Modified
  • Ticket #57242, comment 4

    initial v1  
    44> Some web-servers returns Forbidden error if filename contains redundant dot, for example: filename..jpg
    55
    6 It sounds like `..` triggers some security rule on the server, e.g. to prevent directory traversal. This appears to be similar to #45368, also that ticket is about `..` in post content.
     6It sounds like `..` triggers some security rule on the server, e.g. to prevent directory traversal. This appears to be similar to #45368, although that ticket is about `..` in post content.
    77
    88Applying `rtrim( $filename, '.' )` before appending the extension probably makes sense. On the other hand, as noted above, that does not fix the issue if `..` is in the middle of the file name.