diff --git a/server/Application/Api/Model/AttachmentModel.class.php b/server/Application/Api/Model/AttachmentModel.class.php index 3dac201f4..ee9fd9f9c 100644 --- a/server/Application/Api/Model/AttachmentModel.class.php +++ b/server/Application/Api/Model/AttachmentModel.class.php @@ -304,6 +304,7 @@ public function isDangerFilename($filename){ || $isDangerStr($filename , "%") || $isDangerStr($filename , ".xml") || $isDangerStr($filename , ".xxhtml") + || $isDangerStr($filename , ".aspx") ) { return true; }