$wgFileBlacklist should include 'xhtml'
Closed, ResolvedPublic

Description

Author: wonder

Description:
Along with the other html filetypes, .xhtml uploads should be blacklisted by default, because they could be a threat on a WM site that uses application/xhtml+xml, or even one that doesn't.


Version: 1.16.x
Severity: normal

Details

Reference
bz19355
bzimport set Reference to bz19355.
brion added a comment.Jul 19 2009, 7:42 PM

.xhtml and .xht added in r53487

Gilles moved this task from Untriaged to Done on the Multimedia board.

Add Comment