Opened 14 years ago

Closed 12 years ago

#5520 closed Bug (fixed)

CKfinder 1.4.3 html security does not accept 'HTM' extensions

Reported by: Charles Perk Owned by:
Priority: Normal Milestone:
Component: General Version:
Keywords: CKFinder Cc:

Description

Although I have added HTM in:

$configHtmlExtensions? = array('html', 'htm', 'xml', 'js', 'HTM');

I still get the error message html in first Kb and upload is aborted.

Changing the extension to 'htm' manually solves this. But our third party scoring applications for competitions all use HTM as extensions, e.g. Bridge, Sail200, ZW.

If there is a separate CKfinder bug site you have managed to hide it very well!

Change History (1)

comment:1 Changed 12 years ago by Jakub Ś

Keywords: CKFinder added
Resolution: fixed
Status: newclosed

This issue is no longer reproducible in latest CKFinder 2.2.1. If you are still using old version upgrade is recommended.

NOTE: in order to upload *.htm file to particular folder its resource type should have *.htm extension defined in allowed extensions list (config.resourceType[1].allowedExtensions; http://docs.cksource.com/CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Resource_Types/Built-in)

Note: See TracTickets for help on using tickets.
© 2003 – 2022, CKSource sp. z o.o. sp.k. All rights reserved. | Terms of use | Privacy policy