5G breaks image editing

  • those rules break rotating, cropping and mirroring of images:

    # 5G:[QUERY STRINGS]
...
RewriteCond %{QUERY_STRING} (\"|%22).*(<|>|%3) [NC,OR]
...
RewriteCond %{QUERY_STRING} (\;|'|\"|%22).*(union|select|insert|drop|update|md5|benchmark|or|and|if) [NC,OR]

    the reason seems to be the “history”-part of the url, e.g.:
    admin-ajax.php?action=imgedit-preview&_ajax_nonce=7834c8c5f0&postid=34&history=%5B%7B”r”%3A90%7D%5D&rand=867333

    https://www.ads-software.com/plugins/all-in-one-wp-security-and-firewall/

Viewing 1 replies (of 1 total)
  • Thread Starter brt

    (@brt)

    the cryptic %5B%7B”r”%3A90%7D%5D is actually url-encoded: [{“r”:90}]

Viewing 1 replies (of 1 total)
  • The topic ‘5G breaks image editing’ is closed to new replies.