Page MenuHomePhabricator

Request to add application/rss+xml to approved content types for the ctype parameter on Wikimedia projects
Closed, DeclinedPublic

Description

Author: jamydlan

Description:
The spoken Wikipedia project on EnWiki have set up a podcast/webast/whatever you want to call it
RSS feed of selected spoken articles. However currently the feed (see supplied URL) is beeing
served with the text/x-wiki content type because application/rss+xml is not an "approved"
content type. Some RSS readers may therefore not accept such feeds.

I suggest adding application/rss+xml to the list of "approved" content types for all Wikimedia
servers. As far as I know it's not a security risk, and it would be nice to be eable to serve
"true" RSS feeds.


Version: unspecified
Severity: enhancement
URL: http://en.wikipedia.org/w/index.php?title=Wikipedia:WikiProject_Spoken_Wikipedia/rss&action=raw&ctype=application/rss+xml

Details

Reference
bz9036

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 21 2014, 9:35 PM
bzimport set Reference to bz9036.
bzimport added a subscriber: Unknown Object (MLST).

This would be a security hole, as it would allow arbitrary HTML content to be
rendered in browsers.