* Fix bug #48261.

config/filter.php

@@ -11,7 +11,7 @@ $filter->rules->orderBy    = '/^\w+_(desc|asc)$/i';
 $filter->rules->browseType = '/^by\w+$/i';
 $filter->rules->word       = '/^\w+$/';
 $filter->rules->paramName  = '/^[a-zA-Z0-9_\.]+$/';
-$filter->rules->paramValue = '/^[a-zA-Z0-9=_,`#+:\^\\\\\/\.%\*\|\x7f-\xff\-]+$/';
+$filter->rules->paramValue = '/^[a-zA-Z0-9=_,`#+\^\/\.%\*\|\x7f-\xff\-]+$/';
 
 $filter->default             = new stdclass();
 $filter->default->moduleName = 'code';

module/extension/control.php

@@ -388,7 +388,7 @@ class extension extends control
      */
     public function safe(string $statusFile)
     {
-        $statusFile = str_replace('\\', '/', $statusFile);
+        $statusFile = str_replace('\\', '/', helper::safe64Decode($statusFile));
         $this->view->error = sprintf($this->lang->extension->noticeOkFile, $statusFile, $statusFile);
         $this->view->title = $this->lang->extension->browse;
         $this->display();

module/extension/zen.php

@@ -22,7 +22,7 @@ class extensionZen extends extension
     {
         /* 判断是否要跳转到安全校验页面。 */
         $statusFile = $this->loadModel('common')->checkSafeFile();
-        if($statusFile) die($this->fetch('extension', 'safe', "statusFile=$statusFile"));
+        if($statusFile) die($this->fetch('extension', 'safe', 'statusFile=' . helper::safe64Encode($statusFile)));
     }
 
     /**