cgi extension should be added to wgFileBlacklist
Closed, ResolvedPublic
Actions

Edit Task
Edit Related Tasks...
Create Subtask
Edit Parent Tasks
Edit Subtasks
Merge Duplicates In
Close As Duplicate
Edit Related Objects...
Edit Commits
Edit Mocks
Mute Notifications
Protect as security issue
Award Token
Flag For Later

Assigned To

None

Authored By

	• bzimport
	Nov 13 2004, 5:14 AM

Description

Author: rsiklos

Description:
The $wgFileBlacklist variable in DefaultSettings.php should include 'cgi', since
those kinds of files may run arbitrary code (just like php or pl)

Version: 1.3.x
Severity: normal

Details

Reference: bz874

Event Timeline

• bzimport raised the priority of this task from to Medium.Nov 21 2014, 7:04 PM

• bzimport added a project: MediaWiki-Uploading.

• bzimport set Reference to bz874.

• bzimport added a subscriber: Unknown Object (MLST).

• bzimport created this task.Nov 13 2004, 5:14 AM

jeluf wrote:

Fixed in CVS HEAD and REL1_3.

• Gilles added a project: Multimedia.Dec 4 2014, 10:46 AM

• Gilles moved this task from Untriaged to Done on the Multimedia board.Dec 4 2014, 10:48 AM

cgi extension should be added to wgFileBlacklistClosed, ResolvedPublicActions

Description

Details

Event Timeline

cgi extension should be added to wgFileBlacklist
Closed, ResolvedPublic
Actions