[wp-trac] [WordPress Trac] #57242: Remove redundant dot in sanitize_file_name function

WordPress Trac noreply at wordpress.org
Fri Dec 2 12:00:00 UTC 2022


#57242: Remove redundant dot in sanitize_file_name function
-----------------------------------------+------------------------------
 Reporter:  ArtZ91                       |       Owner:  (none)
     Type:  enhancement                  |      Status:  new
 Priority:  normal                       |   Milestone:  Awaiting Review
Component:  Formatting                   |     Version:
 Severity:  normal                       |  Resolution:
 Keywords:  has-patch reporter-feedback  |     Focuses:
-----------------------------------------+------------------------------

Comment (by ArtZ91):

 I dont know about server thrid-party configuration.

 Test 1:
 test-fajl-s-kirilliczej%2E.png
 →
 /wp-content/uploads/2022/12/test-fajl-s-kirilliczej2e.png
 200 OK

 Test 2:
 ..test-fajl-s-kirilliczej.png
 →
 /wp-content/uploads/2022/12/test-fajl-s-kirilliczej.png
 200 OK

 Test 3:
 /wp-content/uploads/2022/12/test-fajl-s-kiril..liczej.png
 →
 403 Forbidden

 Looks like server has some strange protection from `..` double dot in URL.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57242#comment:3>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list