4.50 release

kalcaddle · Nov 17, 2022 · 1f7072c · 1f7072c
1 parent f29caa4
commit 1f7072c
Show file tree

Hide file tree

Showing 24 changed files with 46 additions and 42 deletions.
diff --git a/ChangeLog.md b/ChangeLog.md
@@ -1,3 +1,6 @@
+### ver4.50 `2022/11/17`
+- 安全问题修复.
+
 ### ver4.49 `2022/8/25`
 - 兼容性调整
 - 安全问题修复.

diff --git a/app/controller/utils.php b/app/controller/utils.php
diff --git a/app/function/web.function.php b/app/function/web.function.php
@@ -548,6 +548,7 @@ function request_url_safe($url){
 		if($schemeNow === $scheme."://"){$hasAllow = true;}
 	}
 	if(!$hasAllow) return false;
+	if(strstr($url,'../')) return false;
 	if(!$info['scheme'] || !$info['host'] || !in_array($info['scheme'],$allow)) return false;
 	if(@file_exists($url) ) return false;
 	return true;

diff --git a/config/version.php b/config/version.php
@@ -1,3 +1,3 @@
 <?php
-define('KOD_VERSION','4.49');
-define('KOD_VERSION_BUILD','02');//time(),20220826
+define('KOD_VERSION','4.50');
+define('KOD_VERSION_BUILD','01');//time(),20221117
diff --git a/plugins/toolsCommon/static/pie/.pie.tif b/plugins/toolsCommon/static/pie/.pie.tif
diff --git a/static/js/app/src/api/default/main.js b/static/js/app/src/api/default/main.js
diff --git a/static/js/app/src/api/view/main.js b/static/js/app/src/api/view/main.js
diff --git a/static/js/app/src/app/main.js b/static/js/app/src/app/main.js
diff --git a/static/js/app/src/desktop/main.js b/static/js/app/src/desktop/main.js
diff --git a/static/js/app/src/edit/main.js b/static/js/app/src/edit/main.js
diff --git a/static/js/app/src/editor/main.js b/static/js/app/src/editor/main.js
diff --git a/static/js/app/src/explorer/main.js b/static/js/app/src/explorer/main.js
diff --git a/static/js/app/src/explorerWap/main.js b/static/js/app/src/explorerWap/main.js
diff --git a/static/js/app/src/plugins/main.js b/static/js/app/src/plugins/main.js
diff --git a/static/js/app/src/setting/main.js b/static/js/app/src/setting/main.js
diff --git a/static/js/app/src/shareEditor/main.js b/static/js/app/src/shareEditor/main.js
diff --git a/static/js/app/src/shareExplorer/main.js b/static/js/app/src/shareExplorer/main.js
diff --git a/static/js/app/src/shareIndex/main.js b/static/js/app/src/shareIndex/main.js
diff --git a/static/js/app/src/user/main.js b/static/js/app/src/user/main.js
diff --git a/static/style/skin/base/app_code_edit.css b/static/style/skin/base/app_code_edit.css
diff --git a/static/style/skin/base/app_desktop.css b/static/style/skin/base/app_desktop.css
diff --git a/static/style/skin/base/app_editor.css b/static/style/skin/base/app_editor.css
diff --git a/static/style/skin/base/app_explorer.css b/static/style/skin/base/app_explorer.css
diff --git a/static/style/skin/base/app_setting.css b/static/style/skin/base/app_setting.css