diff options
author | Pierre Schmitz <pierre@archlinux.de> | 2011-05-06 23:34:10 +0200 |
---|---|---|
committer | Pierre Schmitz <pierre@archlinux.de> | 2011-05-06 23:34:10 +0200 |
commit | 78677c7bbdcc9739f6c10c75935898a20e1acd9e (patch) | |
tree | 1c0710a98e60f3cf988def7a2879e3489269cb91 /img_auth.php | |
parent | 75abb5292328bdb07a91ad7229a121ab3446569d (diff) |
update to MediaWiki 1.16.5
Diffstat (limited to 'img_auth.php')
-rw-r--r-- | img_auth.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/img_auth.php b/img_auth.php index 26ba9413..0fe239ba 100644 --- a/img_auth.php +++ b/img_auth.php @@ -39,7 +39,7 @@ if ( $wgImgAuthPublicTest // Check for bug 28235: QUERY_STRING overriding the correct extension if ( isset( $_SERVER['QUERY_STRING'] ) - && preg_match( '/\.[a-z0-9]{1,4}(#|\?|$)/i', $_SERVER['QUERY_STRING'] ) ) + && preg_match( '/\.[^\\/:*?"<>|%]+(#|\?|$)/i', $_SERVER['QUERY_STRING'] ) ) { wfForbidden( 'img-auth-accessdenied', 'img-auth-bad-query-string' ); } |