W13R 9f270c12b4 Profile pictures are now handled by the application to mitigate possible directory traversals ... to other sub-directories of the static directory (Admins/Staff with the right to edit user accounts were able to set a path like ../static/favicon.png for the profile picture - this isn't a "i'm in, now i have root access and can hack your mom"-vulnerability, but better fix it before it evolves to one. or a dragon. it's too late for this crap.)		2022-11-02 22:53:04 +01:00
..
default.svg	Profile pictures are now handled by the application to mitigate possible directory traversals	2022-11-02 22:53:04 +01:00