Page MenuHomePhabricator

Mediawiki accepts to create thumbnails with the wrong extension
Closed, ResolvedPublic


Author: thomasV1

The thumbnail pass-through script is returning results when being passed the wrong thumb extension.
We should make sure it's tuned a little more tightly

See url: the jpeg image has a .ogg extension

Next, the apache server might use this wrong file extension to determine the mime type of the file.

Version: unspecified
Severity: normal



Event Timeline

bzimport raised the priority of this task from to Medium.Nov 21 2014, 10:35 PM
bzimport set Reference to bz18127.
bzimport added a subscriber: Unknown Object (MLST).

I'm pretty sure this is actually a problem with the 404 thumb-handler scripts:

MediaWiki here doesn't necessarily see the URL that the 404 handler is going through... we should make sure that only valid names result in a valid access.

thomasV1 wrote:

the file
has a few lines about the mod_mime_magic module.

is this module active ?
it would explain why the above .ogg file keeps
being transmitted with an image mime header

Mass component change for merge of "File/Repo" and "Images and Files"

This is accounted for with the new thumb handler (which tries to avoid creating thumbnails at once place while streaming them for a different URL, which resulted in thumbnails which cannot be purged).

Gilles raised the priority of this task from Medium to Unbreak Now!.Dec 4 2014, 10:23 AM
Gilles added a project: Multimedia.
Gilles moved this task from Untriaged to Done on the Multimedia board.
Gilles lowered the priority of this task from Unbreak Now! to Medium.Dec 4 2014, 11:20 AM