search

ugie-cake / cakephp-content-blocks

User editable content for CakePHP templates
BSD 3-Clause "New" or "Revised" License
1 stars 2 forks source link

Any filetype can be uploaded in content blocks image #8

Open gergoreth opened 2 weeks ago

gergoreth commented 2 weeks ago

No validation of file type when uploading a file for an image content block. Any file can be uploaded including php files as found by @imnopro

imnopro commented 2 weeks ago

This has been tested, and the PHP runs on the website and can invoke Javascript.

gergoreth commented 2 weeks ago

Pull request: https://github.com/ugie-cake/cakephp-content-blocks/pull/9