orbit-oss/flask
4
4
Fork 2
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

docs: `.html, .py`

Browse source
This commit is contained in:
defuz 2014-11-05 07:46:58 +03:00
parent d4b9b9854c
commit d338dc8a13
8 changed files with 16 additions and 16 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/patterns/fileuploads.rst
View file

@ -43,7 +43,7 @@ Why do we limit the extensions that are allowed? You probably don't want
your users to be able to upload everything there if the server is directly
sending out the data to the client. That way you can make sure that users
are not able to upload HTML files that would cause XSS problems (see
:ref:`xss`). Also make sure to disallow `.php` files if the server
:ref:`xss`). Also make sure to disallow ``.php`` files if the server
executes them, but who has PHP installed on his server, right? :)
Next the functions that check if an extension is valid and that uploads