Commit Graph

1 Commits (8844e62cb4fc4eb8be9d4a6be6da1fb10d62fa1e)

Author SHA1 Message Date
Kemal Zebari 7adc4717ec
Include file extension checks in attachment API (#32151)
From testing, I found that issue posters and users with repository write
access are able to edit attachment names in a way that circumvents the
instance-level file extension restrictions using the edit attachment
APIs. This snapshot adds checks for these endpoints.
4 months ago