r1292: Prevent XSS attacks by only allowing JPEG, JPG, PNG, and GIF to be displayed...
authorRobert Sesek <rsesek@bluestatic.org>
Sun, 19 Nov 2006 09:03:58 +0000 (09:03 +0000)
committerRobert Sesek <rsesek@bluestatic.org>
Sun, 19 Nov 2006 09:03:58 +0000 (09:03 +0000)
commit8e3958cf568555574782b14724138dda249d4b2f
tree72b2dcf1d30066d0bda06945031abf50d268ccf4
parentb9f1d072f8334dad4214e939c4a2798ecc542001
r1292: Prevent XSS attacks by only allowing JPEG, JPG, PNG, and GIF to be displayed as Content-Type:inline as everything else can be used to execute scripts and such, which would be bad
docs/changes.txt
viewattachment.php