Closed bhou2 closed 2 months ago
The purpose of checking the attachment filename is to avoid the filename to be . or .. or containing / or . So that users cannot put the attachments to any location via a hacking manner.
The purpose of checking the attachment filename is to avoid the filename to be . or .. or containing / or . So that users cannot put the attachments to any location via a hacking manner.