Page MenuHomePhabricator

Mediawiki accepts to create thumbnails with the wrong extension
Closed, ResolvedPublic


Author: thomasV1

The thumbnail pass-through script is returning results when being passed the wrong thumb extension.
We should make sure it's tuned a little more tightly

See url: the jpeg image has a .ogg extension

Next, the apache server might use this wrong file extension to determine the mime type of the file.

Version: unspecified
Severity: normal



Event Timeline

bzimport raised the priority of this task from to Normal.Nov 21 2014, 10:35 PM
bzimport set Reference to bz18127.
bzimport added a subscriber: Unknown Object (MLST).
bzimport created this task.Mar 24 2009, 4:58 PM
brion added a comment.Mar 24 2009, 5:04 PM

I'm pretty sure this is actually a problem with the 404 thumb-handler scripts:

MediaWiki here doesn't necessarily see the URL that the 404 handler is going through... we should make sure that only valid names result in a valid access.

thomasV1 wrote:

the file
has a few lines about the mod_mime_magic module.

is this module active ?
it would explain why the above .ogg file keeps
being transmitted with an image mime header

demon added a comment.Nov 28 2009, 4:41 AM

Mass component change for merge of "File/Repo" and "Images and Files"

This is accounted for with the new thumb handler (which tries to avoid creating thumbnails at once place while streaming them for a different URL, which resulted in thumbnails which cannot be purged).

Gilles raised the priority of this task from Normal to Unbreak Now!.Dec 4 2014, 10:23 AM
Gilles added a project: Multimedia.
Gilles moved this task from Untriaged to Done on the Multimedia board.
Gilles lowered the priority of this task from Unbreak Now! to Normal.Dec 4 2014, 11:20 AM
Restricted Application added a project: Commons. · View Herald TranscriptFeb 22 2019, 7:17 PM