File uploads doesn't support allowedExtensions or strict="false"

cffile tag attributes “allowedExtension“ and “blockedExtension“ : https://github.com/lucee/Lucee/commit/e233efd4e0a56b3cd59ea68a46187fcdd69ca89e

fileUpload() arguments “allowedExtension“ and “blockedExtension“: https://github.com/lucee/Lucee/commit/a0dd5e7304a1e2a75ef1106790c584a6ea765a8e

@Michael Offner,
I've checked cffile tag with lucee fixed version 5.3.8.107-SNAPSHOT.

5.3.8.107-SNAPSHOT

• Attribute allowedExtensions and blockedExtensions are works fine.

• allowedExtensions is override the blockedExtensions and this.blockedExtForFileUpload. So, it works as expected.

• If this.blockedExtForFileUpload = "html" and accept attribute with mimeType(text/html) is allowed the file to upload successfully.

• Seems, the same scanerio throws an error in ACF. Because this.blockedExtForFileUpload doesn't works in this version.

6.0.0.12-SNAPSHOT

• And I've checked fileUpload & fileUploadAll functions with lucee version 6.0.0.12-SNAPSHOT.

• The argument allowedExtensions works fine.

• But blockedExtensions and this.blockedExtForFileUpload doesn't work as expected.

• It doesn't block the fileupload for the declared extension.

@Pothys - MitrahSoft please test in Lucee 5.3 the tag cffile with the attribute “allowedExtension“ and “blockedExtension“ then in Lucee 6 test also the functions [fileUpload, fileUploadAll] with this arguments.

added the function arguments to 6.0.0.12

I’m adding the attribue “allowedExtensions“ AND “blockedExtensions“ to the tag cffile.