-
Notifications
You must be signed in to change notification settings - Fork 8
Open
Description
When scanning code, this code works fine:
<cffile action="upload"
result="result"
filefield="FILE"
destination="#uploadFile#"
nameconflict="overwrite"
allowedExtensions="pdf,.xls,.xlsx,.doc,.docx" />
But this would report an issue Possible Unsafe File Upload [file-upload]
<cffile action="upload"
result="result"
filefield="FILE"
destination="#uploadFile#"
nameconflict="overwrite"
allowedExtensions=".pdf,.xls,.xlsx,.doc,.docx,.ppt" />
The difference is the .ppt in the allowedExtensions. How to support .ppt (powerpoint) and pass the fixinator scan?
Metadata
Metadata
Assignees
Labels
No labels