From 88a48c10d5ac16412ee046837f54a71c6e519a81 Mon Sep 17 00:00:00 2001 From: Savetheinternet Date: Wed, 18 May 2011 16:01:21 +1000 Subject: [PATCH] Improved IE MIME dtection XSS exploit regular expression --- inc/config.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/inc/config.php b/inc/config.php index 36ec32d6..721d0974 100644 --- a/inc/config.php +++ b/inc/config.php @@ -549,7 +549,7 @@ $config['ipv6_ipv4'] = true; // Regular expression to check for IE MIME type detection XSS exploit. To disable, comment the line out // https://github.com/savetheinternet/Tinyboard/issues/20 - $config['ie_mime_type_detection'] = '/<(?:body|head|html|img|plaintext|pre|script|table|title|a href|channel|scriptlet)/'; + $config['ie_mime_type_detection'] = '/<(?:body|head|html|img|plaintext|pre|script|table|title|a href|channel|scriptlet)/i'; // Allowed image file extensions $config['allowed_ext'] = Array('jpg', 'jpeg', 'bmp', 'gif', 'png');