I don't think that mosipov was replying to this thread, he might have mixed his tabs.
The best one to answer this question would be Wiktor, but if I'm not mistaken that file is placed there to avoid that even if some script is uploaded, then it isn't parsed by the server, but it seems that your setup doesn't recognize that directive.
You can think about the file as a second step in the security, so that if somehow a dangerous file is uploaded and the default security fails, this second step would avoid its execution. If you don't allow to upload any kind of file you should be safe. (of course it would be better if you can leave the file or instruct the server in some other way to don't run scripts in the uploaded files)
Again thanks very much for the replies and the helpful information, I really appreciate you all taking the time to offer some advice and reassurance. Cheers, Graham
Re: Cant get file view etc working?
Re: Cant get file view etc working?
Re: Cant get file view etc working?
Re: Cant get file view etc working?
The best one to answer this question would be Wiktor, but if I'm not mistaken that file is placed there to avoid that even if some script is uploaded, then it isn't parsed by the server, but it seems that your setup doesn't recognize that directive.
You can think about the file as a second step in the security, so that if somehow a dangerous file is uploaded and the default security fails, this second step would avoid its execution. If you don't allow to upload any kind of file you should be safe. (of course it would be better if you can leave the file or instruct the server in some other way to don't run scripts in the uploaded files)
Re: Cant get file view etc working?
Wiktor Walc
CTO, CKSource - http://cksource.com
--
Follow CKEditor on: Twitter | Facebook | Google+
Re: Cant get file view etc working?
Cheers,
Graham