[Bug 24022] upload.js doesn't respect $wgStrictFileExtensions

2010-07-01 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=24022

Derk-Jan Hartman hart...@videolan.org changed:

   What|Removed |Added

 Status|NEW |RESOLVED
 Resolution||FIXED

--- Comment #3 from Derk-Jan Hartman hart...@videolan.org 2010-07-01 21:55:25 
CEST ---
Fixed in r68848

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 24022] upload.js doesn't respect $wgStrictFileExtensions

2010-06-18 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=24022

Derk-Jan Hartman hart...@videolan.org changed:

   What|Removed |Added

 CC||hart...@videolan.org

--- Comment #1 from Derk-Jan Hartman hart...@videolan.org 2010-06-18 15:53:11 
CEST ---
We could easily fix this by exposing wgStrictFileExtensions on the upload page,
but that doesn't seem like a good idea to me. Someone might go around looking
for mediawiki sites where he can upload arbitrary files.

Wouldn't it be best if we retooled all this into a single ajax call ?

one that checks for:
-name exists
-name allowed (file extensions checks)
-name normalization (think $wgCapitalizedNamespaces)

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 24022] upload.js doesn't respect $wgStrictFileExtensions

2010-06-18 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=24022

--- Comment #2 from Bryan Tong Minh bryan.tongm...@gmail.com 2010-06-18 
13:57:04 UTC ---
(In reply to comment #1)
 We could easily fix this by exposing wgStrictFileExtensions on the upload 
 page,
 but that doesn't seem like a good idea to me. Someone might go around looking
 for mediawiki sites where he can upload arbitrary files.
 
I don't think it is that much of a problem; you could also try it out by
uploading a file.

 Wouldn't it be best if we retooled all this into a single ajax call ?
 
 one that checks for:
 -name exists
 -name allowed (file extensions checks)
 -name normalization (think $wgCapitalizedNamespaces)

If somebody would implement that, yes, that would be ideal. But for now
exposing wgStrictFileExtensions could be used as quick fix.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l


[Bug 24022] upload.js doesn't respect $wgStrictFileExtensions

2010-06-17 Thread bugzilla-daemon
https://bugzilla.wikimedia.org/show_bug.cgi?id=24022

Prodego prod...@gmail.com changed:

   What|Removed |Added

 CC||prod...@gmail.com
   Severity|enhancement |minor

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.

___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l