[wp-trac] [WordPress Trac] #57242: Remove redundant dot in sanitize_file_name function

WordPress Trac noreply at wordpress.org
Thu Dec 1 22:43:10 UTC 2022


#57242: Remove redundant dot in sanitize_file_name function
-----------------------------------------+------------------------------
 Reporter:  ArtZ91                       |       Owner:  (none)
     Type:  enhancement                  |      Status:  new
 Priority:  normal                       |   Milestone:  Awaiting Review
Component:  Formatting                   |     Version:
 Severity:  normal                       |  Resolution:
 Keywords:  has-patch reporter-feedback  |     Focuses:
-----------------------------------------+------------------------------
Changes (by costdev):

 * keywords:  has-patch => has-patch reporter-feedback


Comment:

 Hi @ArtZ91, thanks for opening this ticket!

 Can you provide any more information about why servers do this, for the
 benefit of others reading this ticket?

 Also, a couple of questions:

 1. What happens if you replace the first dot with `%2E`? i.e.

   https://example.org/wp-content/uploads/2022/12/test-
 fajl-s-kirilliczej%2E.png

 2. Does this also occur if the filename begins with `..`, or contains `..`
 anywhere else? i.e.

  https://example.org/wp-content/uploads/2022/12/..test-
 fajl-s-kirilliczej.png

 Or

   https://example.org/wp-content/uploads/2022/12/test-
 fajl-s-kiril..liczej.png

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/57242#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list