Re:Zero-day in jQuery plugin sample code exploited for at le...
by blueimp on Sunday October 21, 2018 @04:57PM
(#18270205)
Thanks for your comment.
I do think that I share at least part of the blame.
Enabling all file types by default was not necessary and would have prevented this issue.
Especially since there are so many inexperienced developers using PHP, the defaults should have been secure in every perceivable Webserver configuration.
I do think that I share at least part of the blame. Enabling all file types by default was not necessary and would have prevented this issue.
Especially since there are so many inexperienced developers using PHP, the defaults should have been secure in every perceivable Webserver configuration.