From 80bb0f2222dd99ed2ce59e804b833bab63cc376a Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Thu, 9 May 2013 01:40:46 -0400 Subject: Strip URL fragments off of direct requests to uploadify SWF files. Fixes #2068. --- lib/uploadify/uploadify.php | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 lib/uploadify/uploadify.php (limited to 'lib/uploadify/uploadify.php') diff --git a/lib/uploadify/uploadify.php b/lib/uploadify/uploadify.php new file mode 100644 index 00000000..eac15d3a --- /dev/null +++ b/lib/uploadify/uploadify.php @@ -0,0 +1,27 @@ + Date: Thu, 9 May 2013 15:35:17 -0400 Subject: Follow-on: put at least one byte in the fragment so that it doesn't get discarded by browsers. --- lib/uploadify/uploadify.allglyphs.php | 2 +- lib/uploadify/uploadify.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) (limited to 'lib/uploadify/uploadify.php') diff --git a/lib/uploadify/uploadify.allglyphs.php b/lib/uploadify/uploadify.allglyphs.php index b9bd2713..68db0dcc 100644 --- a/lib/uploadify/uploadify.allglyphs.php +++ b/lib/uploadify/uploadify.allglyphs.php @@ -5,7 +5,7 @@ if (empty($_GET["token"])) { // We have not yet redirected $rand = rand(); setcookie("uploadify_token", $rand); - header("Location: uploadify.allglyphs.php?token=$rand#"); + header("Location: uploadify.allglyphs.php?token=$rand#."); exit; } diff --git a/lib/uploadify/uploadify.php b/lib/uploadify/uploadify.php index eac15d3a..8ea78d81 100644 --- a/lib/uploadify/uploadify.php +++ b/lib/uploadify/uploadify.php @@ -5,7 +5,7 @@ if (empty($_GET["token"])) { // We have not yet redirected $rand = rand(); setcookie("uploadify_token", $rand); - header("Location: uploadify.php?token=$rand#"); + header("Location: uploadify.php?token=$rand#."); exit; } -- cgit v1.2.3 From c9627210165e7fc0ff9a2bf00c435d50a013e13f Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Thu, 9 May 2013 16:01:57 -0400 Subject: Add the proper Gallery preamble. --- lib/uploadify/uploadify.allglyphs.php | 21 ++++++++++++++++++++- lib/uploadify/uploadify.php | 21 ++++++++++++++++++++- 2 files changed, 40 insertions(+), 2 deletions(-) (limited to 'lib/uploadify/uploadify.php') diff --git a/lib/uploadify/uploadify.allglyphs.php b/lib/uploadify/uploadify.allglyphs.php index 68db0dcc..e784b9b0 100644 --- a/lib/uploadify/uploadify.allglyphs.php +++ b/lib/uploadify/uploadify.allglyphs.php @@ -1,4 +1,23 @@ - Date: Thu, 9 May 2013 20:09:15 -0400 Subject: Get rid of the security preamble - we intend for these files to be directly accessible. --- lib/uploadify/uploadify.allglyphs.php | 2 +- lib/uploadify/uploadify.php | 2 +- modules/gallery/tests/File_Structure_Test.php | 5 +++++ 3 files changed, 7 insertions(+), 2 deletions(-) (limited to 'lib/uploadify/uploadify.php') diff --git a/lib/uploadify/uploadify.allglyphs.php b/lib/uploadify/uploadify.allglyphs.php index e784b9b0..18b75a50 100644 --- a/lib/uploadify/uploadify.allglyphs.php +++ b/lib/uploadify/uploadify.allglyphs.php @@ -1,4 +1,4 @@ -