mirror of
https://github.com/BookStackApp/BookStack.git
synced 2026-02-06 00:59:39 +03:00
upload error with images with points in the file name #1556
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @Jonny124 on GitHub (Feb 25, 2020).
When you upload a picture file with a second point in the name an error message is shown stating just specific file types can be uploaded.
example:
asdf2.0.jpg -> error
asdf20.jpg - > no error
Bookstack version 0.28.2 was used.
@ssddanbrown commented on GitHub (Feb 26, 2020):
Yeah, There's prevention in place to prevent "double extensions" in uploaded files as it opens systems up to a range of potential double-extension or directory traversal attacks.