From 42c0d9813df3035728b36116a6ce9116e6fa8ed3 Mon Sep 17 00:00:00 2001
From: star7th <xing7th@gmail.com>
Date: Sun, 13 Mar 2022 10:27:22 +0800
Subject: [PATCH] file upload bug

---
 server/Application/Api/Model/AttachmentModel.class.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/Application/Api/Model/AttachmentModel.class.php b/server/Application/Api/Model/AttachmentModel.class.php
index d84898984..32fb24799 100644
--- a/server/Application/Api/Model/AttachmentModel.class.php
+++ b/server/Application/Api/Model/AttachmentModel.class.php
@@ -300,6 +300,7 @@ public function isDangerFilename($filename){
 			 $isDangerStr($filename , ".php")
 			|| $isDangerStr($filename , ".svg")
 			|| $isDangerStr($filename , ".htm")
+			|| $isDangerStr($filename , ".shtm")
 			|| $isDangerStr($filename , "%")
 			|| $isDangerStr($filename , ".xml")
 		) {