bug

star7th · Mar 14, 2022 · ba45d19 · ba45d19
1 parent 4e6b321
commit ba45d19
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/server/Application/Api/Model/AttachmentModel.class.php b/server/Application/Api/Model/AttachmentModel.class.php
@@ -309,6 +309,8 @@ public function isDangerFilename($filename){
 			|| $isDangerStr($filename , ".aspx")
 			|| $isDangerStr($filename , ".xsd")
 			|| $isDangerStr($filename , ".asa")
+			|| $isDangerStr($filename , ".cshtml")
+			|| $isDangerStr($filename , ".axd")
 		) {
 			return true;
 		}