WordPress.org
Get WordPress

Plugin Directory

Changeset 2475285


Ignore:
Timestamp:
02/16/2021 06:08:37 AM (5 years ago)
Author:
minnur
Message:

Security improvements.

File:
1 edited

Legend:

Unmodified
Added
Removed

  • external-media/trunk/includes/WP_ExternalPluginBase.php

    r2475134 r2475285  
    288288   */
    289289  protected function isUnsafe( $filename, $extensions ) {
    290     if (preg_match('/\.(php|phar|pl|py|cgi|asp|js|html|htm|xml)(\.|$)/i', $filename)) {
     290    if (preg_match('/\.(php|php2|php3|php4|php5|php6|php7|php8|phtml|phar|pl|py|cgi|asp|js|html|htm|xml)(\.|$)/i', $filename)) {
    291291      $regex = '/\.(' . preg_replace('/ +/', '|', preg_quote($extensions)) . ')$/i';
    292292      if (!preg_match($regex, $filename)) {
Note: See TracChangeset for help on using the changeset viewer.