Last modified: 2007-06-07 20:49:44 UTC

Wikimedia Bugzilla is closed!

Wikimedia migrated from Bugzilla to Phabricator. Bug reports are handled in Wikimedia Phabricator.
This static website is read-only and for historical purposes. It is not possible to log in and except for displaying bug reports and their history, links might be broken. See T10989, the corresponding Phabricator task for complete and up-to-date bug report information.
Bug 8989 - Blacklist .mht and .mhtml extensions
Blacklist .mht and .mhtml extensions
Status: RESOLVED FIXED
Product: MediaWiki
Classification: Unclassified
Uploading (Other open bugs)
unspecified
All All
: Normal enhancement (vote)
: ---
Assigned To: Nobody - You can work on this!
: easy, patch, patch-need-review
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2007-02-14 17:10 UTC by ekb87ds02
Modified: 2007-06-07 20:49 UTC (History)
1 user (show)

See Also:
Web browser: ---
Mobile Platform: ---
Assignee Huggle Beta Tester: ---


Attachments
Adds mhtml, mhtm, and mht to the default file blacklist (635 bytes, patch)
2007-03-29 19:57 UTC, Robert Leverington
Details

Description ekb87ds02 2007-02-14 17:10:47 UTC
Here's another useful Internet Explorer extension: mhtml, or mht for short.
These are html and supporting files in a container.

I'm not sure if internet explorer considers these to be in the same domain as
the webpage hosting it (for xss purposes), but mediawiki should probably have
this file type in its default blacklist anyway.

Most of these files start with an html file, so they are caught by the filter
that searches the first part of the file for html code. It can contain anything
though, so it might start with for instance an image, so it wouldn't be caught.
Comment 1 Robert Leverington 2007-03-29 19:57:14 UTC
Created attachment 3401 [details]
Adds mhtml, mhtm, and mht to the default file blacklist

This patch adds mhtml, mhtm and mht. I have added mhtm just in case as this is
in a similar form to htm and may be used in future.
Comment 2 Rob Church 2007-06-07 20:49:44 UTC
Fixed in r22826.

Note You need to log in before you can comment on or make changes to this bug.


Navigation
Links