diff options
| author | Savetheinternet <savetheinternet@tinyboard.org> | 2011-05-18 16:01:21 +1000 |
|---|---|---|
| committer | Savetheinternet <savetheinternet@tinyboard.org> | 2011-05-18 16:01:21 +1000 |
| commit | 88a48c10d5ac16412ee046837f54a71c6e519a81 (patch) | |
| tree | 59a653cae356f17ad067a323b6def0064f8fa73e /inc | |
| parent | 15f804bcff8b7c9ef4211cd160eea8a37eb1cd51 (diff) | |
Improved IE MIME dtection XSS exploit regular expression
Diffstat (limited to 'inc')
| -rw-r--r-- | inc/config.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/inc/config.php b/inc/config.php index 36ec32d6..721d0974 100644 --- a/inc/config.php +++ b/inc/config.php @@ -549,7 +549,7 @@ $config['ipv6_ipv4'] = true; // Regular expression to check for IE MIME type detection XSS exploit. To disable, comment the line out // https://github.com/savetheinternet/Tinyboard/issues/20 - $config['ie_mime_type_detection'] = '/<(?:body|head|html|img|plaintext|pre|script|table|title|a href|channel|scriptlet)/'; + $config['ie_mime_type_detection'] = '/<(?:body|head|html|img|plaintext|pre|script|table|title|a href|channel|scriptlet)/i'; // Allowed image file extensions $config['allowed_ext'] = Array('jpg', 'jpeg', 'bmp', 'gif', 'png'); |