RE: [PHP-DEV] data stream restricted by allow_url_fopen (Bug #47336)
| From: | Christian Stoller | Date: | Mon, 11 Mar 2013 14:02:31 +0000 |
| Subject: | RE: [PHP-DEV] data stream restricted by allow_url_fopen (Bug #47336) | ||
| References: | 1 2 3 4 | Groups: | php.internals |
| Request: | Send a blank email to internals+get-66587@lists.php.net to get a copy of this message | ||
> If include of data urls is enabled, the attacker could do the same with
> &file=data:image/png;base64,PD9waHAgZXZhbCgkX0dFVFsiY29kZSJdKTsgPz4K
Okay, I got it ;-)
So it would be nice if someone could update the documentation and set the bug to
"resolved"
Thanks for your help.