Timeline for Does changing an uploaded executable's file extension to .png render it safe?
Current License: CC BY-SA 3.0
2 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Aug 10, 2016 at 18:11 | comment | added | IMSoP | This much more directly addresses the situation described in the question than any of the existing answers. And "defence in depth" is an important point: It would be just as dangerous to say "you can safely ignore file extensions" as it would be to say "if you fix the file extension, you can safely ignore everything else". | |
| Aug 10, 2016 at 12:14 | history | answered | Peter Green | CC BY-SA 3.0 |