summaryrefslogtreecommitdiff
path: root/img_auth.php
diff options
context:
space:
mode:
authorPierre Schmitz <pierre@archlinux.de>2011-05-06 23:34:10 +0200
committerPierre Schmitz <pierre@archlinux.de>2011-05-06 23:34:10 +0200
commit78677c7bbdcc9739f6c10c75935898a20e1acd9e (patch)
tree1c0710a98e60f3cf988def7a2879e3489269cb91 /img_auth.php
parent75abb5292328bdb07a91ad7229a121ab3446569d (diff)
update to MediaWiki 1.16.5
Diffstat (limited to 'img_auth.php')
-rw-r--r--img_auth.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/img_auth.php b/img_auth.php
index 26ba9413..0fe239ba 100644
--- a/img_auth.php
+++ b/img_auth.php
@@ -39,7 +39,7 @@ if ( $wgImgAuthPublicTest
// Check for bug 28235: QUERY_STRING overriding the correct extension
if ( isset( $_SERVER['QUERY_STRING'] )
- && preg_match( '/\.[a-z0-9]{1,4}(#|\?|$)/i', $_SERVER['QUERY_STRING'] ) )
+ && preg_match( '/\.[^\\/:*?"<>|%]+(#|\?|$)/i', $_SERVER['QUERY_STRING'] ) )
{
wfForbidden( 'img-auth-accessdenied', 'img-auth-bad-query-string' );
}