[TYPO3-core] RFC #11369: jumpUrl should only allow files matching fileDenyPattern

[Bastian Waidelich]

Ingmar Schlecht wrote:

Hi Ingmar,

> Problem:
> jumpUrl should only allow files matching fileDenyPattern, so e.g. PHP
> files can not be downloaded with jumpUrl any more.

+1 by reading and testing.


Is there a specific reason why you did not make use of 
t3lib_div::verifyFilenameAgainstDenyPattern?


if (!preg_match('/'.$this->TYPO3_CONF_VARS['BE']['fileDenyPattern'] . 
'/i', $this->jumpurl)) {

vs.

if (t3lib_div::verifyFilenameAgainstDenyPattern($this->jumpurl)) {


best,
Bastian