Skip to content

Commit 1f7072c

Browse files
kalcaddlekalcaddle
committed
4.50 release
1 parent f29caa4 commit 1f7072c

24 files changed

Lines changed: 46 additions & 42 deletions

File tree

‎ChangeLog.md‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,6 @@
1+
### ver4.50 `2022/11/17`
2+
- 安全问题修复.
3+
14
### ver4.49 `2022/8/25`
25
- 兼容性调整
36
- 安全问题修复.

‎app/controller/utils.php‎

Lines changed: 1 addition & 1 deletion
Large diffs are not rendered by default.

‎app/function/web.function.php‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -548,6 +548,7 @@ function request_url_safe($url){
548548
if($schemeNow === $scheme."://"){$hasAllow = true;}
549549
}
550550
if(!$hasAllow) return false;
551+
if(strstr($url,'../')) return false;
551552
if(!$info['scheme'] || !$info['host'] || !in_array($info['scheme'],$allow)) return false;
552553
if(@file_exists($url) ) return false;
553554
return true;

‎config/version.php‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,3 @@
11
<?php
2-
define('KOD_VERSION','4.49');
3-
define('KOD_VERSION_BUILD','02');//time(),20220826
2+
define('KOD_VERSION','4.50');
3+
define('KOD_VERSION_BUILD','01');//time(),20221117

‎plugins/toolsCommon/static/pie/.pie.tif‎

Lines changed: 1 addition & 1 deletion
Large diffs are not rendered by default.

‎static/js/app/src/api/default/main.js‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎static/js/app/src/api/view/main.js‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎static/js/app/src/app/main.js‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎static/js/app/src/desktop/main.js‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎static/js/app/src/edit/main.js‎

Lines changed: 2 additions & 2 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

0 commit comments

Comments
 (0)