We are migrating CKEditor issue tracking to GitHub. Please, use GitHub to report any new issues.

The former tracking system (this website) will still be available in the read-only mode. All issues reported in the past will still be available publicly and can be referenced.

Important: we decided not to transfer all the tickets to GitHub, as many of them are not reproducible anymore or simply no longer requested by the community.
If the issue you are interested in, can be still reproduced in the latest version of CKEditor, feel free to report it again on GitHub.
At the same time please note that issues reported on this website are still taken into consideration when picking up candidates for next milestones.

To report a new issue, go to https://github.com/ckeditor/ckeditor-dev/issues and follow the instructions in the issue template.

Context Navigation

← Previous Ticket
Next Ticket →

Opened 18 years ago

Closed 18 years ago

Last modified 18 years ago

#273 closed New Feature (fixed)

Update default denied files extensions (sh, shtml, shtm, phtm)

Reported by:	Alexander Melanchenko	Owned by:
Priority:	Normal	Milestone:	FCKeditor 2.4.3
Component:	General	Version:
Keywords:		Cc:

Description

For rising security this may help by adding this file extensions in denied list

sh, shtml, shtm, phtm

in array FCKConfig.LinkUploadDeniedExtensions in file fckconfig.js

Change History (4)

comment:1 Changed 18 years ago by Alexander Melanchenko

And same updates must be in server part files : editor/filemanager/upload/php/config.php editor/filemanager/browser/default/connectors/php/config.php

comment:2 Changed 18 years ago by Frederico Caldeira Knabben

Milestone:	→ FCKeditor 2.4.3

comment:3 Changed 18 years ago by Frederico Caldeira Knabben

This one is supposed to be fixed with #454.

comment:4 Changed 18 years ago by Alfonso Martínez de Lizarrondo

Resolution:	→ fixed
Status:	new → closed

I've commited in [310] the changes to the trunk, and I've done the changes for #454 in [311], so I'll close this.

Note: See TracTickets for help on using tickets.

Download in other formats: