Disallowing external sites by default, changed PCRE check to substring check
per Matthew's suggestion
(http://code.google.com/p/timthumb/issues/detail?id=273#c2).
Seems to work well.
Original issue reported on code.google.com by frett...@gmail.com on 13 Oct 2011 at 8:21
Original issue reported on code.google.com by
frett...@gmail.com
on 13 Oct 2011 at 8:21Attachments: