mbirth/LuckyCoinkydink
1
0
Fork 0
Code Issues Pull Requests Activity

Strict feed template name checking (#431)

Browse Source 
otherwise requests like /rss.php?version=1 will still crash
This commit is contained in:
Thomas Heidrich 2016-12-14 18:19:44 +01:00
parent e9f98f80f0
commit 99e9b70c9b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rss.php
View File

@ -23,7 +23,7 @@ if (empty($version)) {
} else {
# be sure it is an allowed version, to prevent attackers sniffing for unrelated files on the file system
$allowed_versions = ['opml1.0', '0.91', '1.0', '2.0', 'atom0.3', 'atom1.0'];
if (! in_array($version, $allowed_versions)) {
if (! in_array($version, $allowed_versions, true)) {
header('Status: 404 Not Found');
exit;
}