#23152: Disallow tiff (and other non png non text) uploads --------------------------------------------------+----------------- Reporter: cypherpunks | Owner: qbi Type: defect | Status: new Priority: Medium | Milestone: Component: Internal Services/Service - trac | Version: Severity: Normal | Keywords: Actual Points: | Parent ID: Points: | Reviewer: Sponsor: | --------------------------------------------------+----------------- Tiff is a quite a complicated format. Its implementation can contain vulnerabilities.
Some man creates tickets with tiffs attached: #23140, #23085. People consider this as an attack. They even ask him in a rude form not to post tiffs. Maybe we should protect him from such a rudeness ;) I suggest to disallow uploads of non-text formats other than the ones in the following whitelist: ["png"]. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/23152> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs