Last modified: 2007-06-07 20:49:44 UTC

Wikimedia Bugzilla is closed!

Wikimedia has migrated from Bugzilla to Phabricator. Bug reports should be created and updated in Wikimedia Phabricator instead. Please create an account in Phabricator and add your Bugzilla email address to it.
Wikimedia Bugzilla is read-only. If you try to edit or create any bug report in Bugzilla you will be shown an intentional error message.
In order to access the Phabricator task corresponding to a Bugzilla report, just remove "static-" from its URL.
You could still run searches in Bugzilla or access your list of votes but bug reports will obviously not be up-to-date in Bugzilla.
Bug 8989 - Blacklist .mht and .mhtml extensions
Blacklist .mht and .mhtml extensions
Product: MediaWiki
Classification: Unclassified
Uploading (Other open bugs)
All All
: Normal enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
: easy, patch, patch-need-review
Depends on:
  Show dependency treegraph
Reported: 2007-02-14 17:10 UTC by ekb87ds02
Modified: 2007-06-07 20:49 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---

Adds mhtml, mhtm, and mht to the default file blacklist (635 bytes, patch)
2007-03-29 19:57 UTC, Robert Leverington

Description ekb87ds02 2007-02-14 17:10:47 UTC
Here's another useful Internet Explorer extension: mhtml, or mht for short.
These are html and supporting files in a container.

I'm not sure if internet explorer considers these to be in the same domain as
the webpage hosting it (for xss purposes), but mediawiki should probably have
this file type in its default blacklist anyway.

Most of these files start with an html file, so they are caught by the filter
that searches the first part of the file for html code. It can contain anything
though, so it might start with for instance an image, so it wouldn't be caught.
Comment 1 Robert Leverington 2007-03-29 19:57:14 UTC
Created attachment 3401 [details]
Adds mhtml, mhtm, and mht to the default file blacklist

This patch adds mhtml, mhtm and mht. I have added mhtm just in case as this is
in a similar form to htm and may be used in future.
Comment 2 Rob Church 2007-06-07 20:49:44 UTC
Fixed in r22826.

Note You need to log in before you can comment on or make changes to this bug.