Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Issues

Select view

Select search mode

 
2 of 2

Regression - this.blockedextforfileupload doesn't works for the file upload

Fixed

Description

this.blockedextforfileupload defined in the Appplication.cfc doesn't block the file upload (via cfile action=upload, fileUpload(), fileUploadAll())

Example: this.blockedextforfileupload = "cfm,pdf"; in the application.cfc didn't block the pdf/cfm file uploads

 

The regression starts from 5.3.8.107-SNAPSHOT onwards. The ticket fix causes to this issue.
regression commit:

Environment

None

Details

Assignee

Reporter

Priority

Labels

Fix versions

New Issue warning screen

Before you create a new Issue, please post to the mailing list first https://dev.lucee.org

Once the issue has been verified, one of the Lucee team will ask you to file an issue

Affects versions

Created 14 October 2022 at 09:34
Updated 18 June 2023 at 16:42
Resolved 26 April 2023 at 14:44

Activity

Show:

Pothys - MitrahSoft26 April 2023 at 14:44

I checked this issue on fixed Lucee versions 6.0.0.381-SNAPSHOT and 5.4.0.49-SNAPSHOT. Now it works fine when blockedextforfileupload is defined in Application.cfc for file upload functions.

Zac Spitzer26 April 2023 at 07:04
Edited

5.3

5.4

6.0

Pothys - MitrahSoft17 October 2022 at 08:26

I added a fix to this ticket

PR for 6.0:

PR for 5.3:

Flag notifications