mbirth/LuckyCoinkydink
1
0
Fork 0
Code Issues Pull Requests Activity

Merge pull request #432 from gnuheidix/PR_rss_version_parameter

Browse Source 
Strict feed template name checking (#431)
This commit is contained in:
onli 2016-12-15 05:31:09 +01:00 committed by GitHub
commit ccfc8c31c2
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rss.php
View File

@ -23,7 +23,7 @@ if (empty($version)) {
} else {
# be sure it is an allowed version, to prevent attackers sniffing for unrelated files on the file system
$allowed_versions = ['opml1.0', '0.91', '1.0', '2.0', 'atom0.3', 'atom1.0'];
if (! in_array($version, $allowed_versions)) {
if (! in_array($version, $allowed_versions, true)) {
header('Status: 404 Not Found');
exit;
}