You are here: Foswiki>Tasks Web>Component>TopicInteractionPlugin>Item14894 (30 Apr 2024, MichaelDaum)Edit Attach

Item14894: TopicInteractionPlugin does not apply `{UploadFilter}` setting

Priority: Security
Current State: Closed
Released In: n/a
Target Release:

Applies To: Extension
Component: TopicInteractionPlugin
Branches:

Reported By: LynnwoodBrown
Waiting For:
Last Change By: MichaelDaum

TopicInteractionPlugin uploads files that matach regex of file names that are suppose to be prohibited by configure's Security and Authentication > Environment > {UploadFilter} setting. This is a security issue since users would expect that site-wide setting to be respected.

-- LynnwoodBrown - 22 Jan 2020

Fixed two years ago.

-- MichaelDaum - 30 Apr 2024

ItemTemplate edit

Summary	TopicInteractionPlugin does not apply `{UploadFilter}` setting
ReportedBy	LynnwoodBrown
Codebase	2.1.6
SVN Range
AppliesTo	Extension
Component	TopicInteractionPlugin
Priority	Security
CurrentState	Closed
WaitingFor
Checkins
ReleasedIn	n/a
CheckinsOnBranches
trunkCheckins
masterCheckins
ItemBranchCheckins
Release02x01Checkins
Release02x00Checkins
Release01x01Checkins