[Mailman-Users] digest mode links
Why do digest mode links rename a .jpg file? A Mac OS X user can't see attachments. URL: http://lists.metalartists.org/mailman/private/sandbox/attachments/20100219/9e05e1cf/attachment.obj -- next part -- A non-text attachment was scrubbed... Name: DSC04246.JPG Type: application/octet-stream Size: 153072 bytes Desc: not available Thanks, John -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] digest mode links
John Griessen wrote: Why do digest mode links rename a .jpg file? A Mac OS X user can't see attachments. URL: http://lists.metalartists.org/mailman/private/sandbox/attachments/20100219/9e05e1cf/attachment.obj -- next part -- A non-text attachment was scrubbed... Name: DSC04246.JPG Type: application/octet-stream Size: 153072 bytes Desc: not available Because in your installation, the scrubber generates the extension from the Content-Type which in this case is application/octet-stream and not image/jpeg as it should be for a JPEG file. This is really an issue with the MUA that composed the message, but if you want Mailman to use the extension from the file name rather than one appropriate for the Content-Type, you can set SCRUBBER_USE_ATTACHMENT_FILENAME_EXTENSION = True in mm_cfg.py. -- Mark Sapiro m...@msapiro.netThe highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] digest mode links
On 28-Feb-10 09:59, John Griessen wrote: A non-text attachment was scrubbed... Name: DSC04246.JPG Type: application/octet-stream Because it was defined incorrectly as an application/octet stream instead of as an image/jpeg -- I draw the line at 7 unreturned phone calls. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] digest mode links
On 28-Feb-10 11:03, Mark Sapiro wrote: SCRUBBER_USE_ATTACHMENT_FILENAME_EXTENSION = True Would that be considered unsafe? I mean, it SEEMS unsafe, but is it really? -- Overhead, without any fuss, the stars were going out. -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
Re: [Mailman-Users] digest mode links
LuKreme wrote: On 28-Feb-10 11:03, Mark Sapiro wrote: SCRUBBER_USE_ATTACHMENT_FILENAME_EXTENSION = True Would that be considered unsafe? I mean, it SEEMS unsafe, but is it really? It could be. Suppose I send a message to your list with an attached evil_app.exe file that I call Content-Type: text/plain without a charset. This file now gets scrubbed stored on your server and is accessable in your archives as a .exe file, so if someone retrieves it and tries to open it, it will open as an executable. If it were stored with an appropriate extension for its MIME type, attempting to open it would probably try to open it with a text viewer and just display garbage. On the other hand, if you don't scrub_nondigest, it was already delivered to your list's message and MIME digest members with it's original file name and extension, and this has no effect on that, and that's probably the more serious risk. -- Mark Sapiro m...@msapiro.netThe highway is for gamblers, San Francisco Bay Area, Californiabetter use your sense - B. Dylan -- Mailman-Users mailing list Mailman-Users@python.org http://mail.python.org/mailman/listinfo/mailman-users Mailman FAQ: http://wiki.list.org/x/AgA3 Security Policy: http://wiki.list.org/x/QIA9 Searchable Archives: http://www.mail-archive.com/mailman-users%40python.org/ Unsubscribe: http://mail.python.org/mailman/options/mailman-users/archive%40jab.org
