Commit graph

14 commits

Author SHA1 Message Date
Kijin Sung
dfa1e93c79 Remove unnecessary header and footer from class files
- 아래에 이미 author 언급이 있으므로 중복되는 저작권 표기는 제거
- 클래스 하단에 불필요한 end of file 표시 제거 (파일 하나에 클래스 하나씩이므로
  파일이 중간에 끊겼다면 클래스가 닫히지 않아 쉽게 알 수 있음)
2023-01-30 23:52:23 +09:00
Kijin Sung
c881e73c1d Remove trailing whitespace in legacy class files 2023-01-17 21:07:55 +09:00
Kijin Sung
b193ad73e3 Fix #1274 check chunked uploads after all chunks are ready 2020-04-16 18:17:04 +09:00
Kijin Sung
cd084d6073 Fix invalid function call 2018-10-18 15:51:44 +09:00
Kijin Sung
e98cf03d95 Move upload file filter to Rhymix Framework and add proper unit tests for SVG-based attacks 2018-10-18 14:34:19 +09:00
Kijin Sung
19331e6746 Additional XSS checks #1088 2018-09-18 13:27:55 +09:00
Kijin Sung
e03ccbd7a9 Also filter XML and HTML file uploads
- Detect possible XML (including SVG) by actual content, not extension
- Check large files in overlapping chunks to reduce memory usage
- Check XML files for external entities
- Check HTML files for SSI and PHP code
2018-09-18 02:45:48 +09:00
Kijin Sung
60d390f52e Initial mitigations for #1088 #1089 2018-09-17 00:48:47 +09:00
Kijin Sung
4594c40321 Disable useless UploadFileFilter 2016-03-11 19:55:41 +09:00
bnu
932862be1f #64 서버 내 경로를 절대경로로 변경 2013-11-23 11:59:49 +09:00
khongchi
29a2a99ac6 #53 파일업로드 취약점 방어 기능 disable 2013-11-15 14:00:50 +09:00
akasima
bce0a0b6d4 copyright add to php files
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13186 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-11-08 05:52:51 +00:00
khongchi
e0879ea45c remove debugPrint
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13184 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-11-08 04:27:55 +00:00
khongchi
acd89ccd9a issue 3633, protect from file upload hacking
git-svn-id: http://xe-core.googlecode.com/svn/branches/maserati@13182 201d5d3c-b55e-5fd7-737f-ddc643e51545
2013-11-08 03:44:04 +00:00