Last modified: 2013-06-18 15:32:34 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T20127, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 18127 - Mediawiki accepts to create thumbnails with the wrong extension
Mediawiki accepts to create thumbnails with the wrong extension
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
File management (Other open bugs)
unspecified
All All
: Normal normal (vote)
: ---
Assigned To: Nobody - You can work on this!
http://upload.wikimedia.org/wikipedia...
:
Depends on:
Blocks: 41371
  Show dependency treegraph
 
Reported: 2009-03-24 16:58 UTC by ThomasV
Modified: 2013-06-18 15:32 UTC (History)
4 users (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments

Description ThomasV 2009-03-24 16:58:23 UTC
The thumbnail pass-through script is returning results when being passed the wrong thumb extension. 
We should make sure it's tuned a little more tightly

See url: the jpeg image has a .ogg extension

Next, the apache server might use this wrong file extension to determine the mime type of the file.
Comment 1 Brion Vibber 2009-03-24 17:04:40 UTC
I'm pretty sure this is actually a problem with the 404 thumb-handler scripts:
http://svn.wikimedia.org/viewvc/mediawiki/trunk/tools/upload-scripts/

MediaWiki here doesn't necessarily see the URL that the 404 handler is going through... we should make sure that only valid names result in a valid access.
Comment 2 ThomasV 2009-03-27 09:11:26 UTC
the file http://noc.wikimedia.org/conf/httpd.conf 
has a few lines about the mod_mime_magic module.

is this module active ?
it would explain why the above .ogg file keeps 
being transmitted with an image mime header


Comment 3 Chad H. 2009-11-28 04:41:55 UTC
Mass component change for merge of "File/Repo" and "Images and Files"
Comment 4 Aaron Schulz 2012-10-25 23:23:16 UTC
This is accounted for with the new thumb handler (which tries to avoid creating thumbnails at once place while streaming them for a different URL, which resulted in thumbnails which cannot be purged).

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links