[Bug 22934] files of mimetype with unknown file extension are automatically allowed
https://bugzilla.wikimedia.org/show_bug.cgi?id=22934 Marco changed: What|Removed |Added CC||bawolff...@gmail.com, ||maic...@yahoo.com See Also||https://bugzilla.wikimedia. ||org/show_bug.cgi?id=39012 -- You are receiving this mail because: You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 22934] files of mimetype with unknown file extension are automatically allowed
https://bugzilla.wikimedia.org/show_bug.cgi?id=22934
--- Comment #2 from Derk-Jan Hartman 2010-04-22 01:07:40
CEST ---
The problem here is with verifyExtension() in includes/upload/UploadBase.php
Basically it allows you to upload unknown file types in certain situations.
When the mime type of the new file is unknown, and when the existing file is
not on the list of "recognizable filteypes". ("passing file with unknown
detected mime type; unrecognized extension '$extension', can't verify\n")
The second case is when we don't know the extension of a mimetype that we do
know. ( " no file extension known for mime type $mime, passing file\n")
I don't see a good reason for these exceptions. Why do we have them ?
Especially the latter is clearly problematic as the x-ms-bmp issue has shown.
It creates trouble if our list of mime information or fileextensions isn't
complete.
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
--- You are receiving this mail because: ---
You are the assignee for the bug.
You are on the CC list for the bug.
___
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 22934] files of mimetype with unknown file extension are automatically allowed
https://bugzilla.wikimedia.org/show_bug.cgi?id=22934 Bryan Tong Minh changed: What|Removed |Added CC||bryan.tongm...@gmail.com, ||ro...@robla.net --- Comment #1 from Bryan Tong Minh 2010-04-11 21:20:33 UTC --- Cc Robla, he has done some research on the extension verification if I recall correctly. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
