search

AiursoftWeb / AiurDrive

AiurDrive is a free file sharing service. You can upload your files here and share them with others. Mirror of https://gitlab.aiursoft.cn/aiursoft/aiurdrive
https://drive.aiursoft.cn
Other
12 stars 6 forks source link

关于 Unicode 导致的严重漏洞 #4

Closed Perlistan closed 3 years ago

Perlistan commented 3 years ago

如果用【U+2029、U+2028】创建无后缀文件会导致上传到 driver 后无法删除，现在我的资源文件夹已被垃圾文件占位污染

Perlistan commented 3 years ago

同时也无法打开下载链接和预览

Anduin2017 commented 3 years ago

看来，现在你只能先靠删site再重建site来重置你的site了……能把这种垃圾文件发过来一份吗？

谢谢

Anduin2017 commented 3 years ago

Will be released in production soon.