fileDenyPattern · Question 12 of 12

Why is the fileDenyPattern alone not enough against upload attacks via custom plugins?

1 answer is correct. Hard

Show answer

Answer

  • A It only applies to TYPO3 file operations

Explanation

The pattern protects the file operations of the Core and the backend. A custom upload handler must check itself, for example via an allowlist and a non-executable target.

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications