New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

보안 강화 #3

Open

huhani opened this issue Jul 9, 2019 · 0 comments

Labels

Owner

huhani commented Jul 9, 2019 •

edited

Loading

audioplayback.php에서 특정 확장자와 확장자가 아예 없는 파일(XE에서 flac파일을 올리면 확장자가 사라짐)만 불러올 수 있도록 필터링.
혹여나 암호화, 해쉬 key가 누출되더라도 핵심 파일은 못 불러오게끔 최종방어라인 구성 필요!

huhani added the enhancement label

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment