New subject: [Mediawiki-l] How do you allow zip files uploads

16 Oct 2009

Hello,

.zip files are locked in $wgMimeTypeBlacklist because .zip can be a security
hole. 

If you really want to enable the upload, add this to LocalSettings.php:

$wgMimeTypeBlacklist= array(
	# HTML may contain cookie-stealing JavaScript and web bugs
	'text/html', 'text/javascript', 'text/x-javascript',
'application/x-shellscript',
	# PHP scripts may execute arbitrary code on the server
	'application/x-php', 'text/x-php',
	# Other types that may be interpreted by some servers
	'text/x-python', 'text/x-perl', 'text/x-bash',
'text/x-sh',
'text/x-csh',
	# Windows metafile, client-side vulnerability on some systems
	'application/x-msmetafile',
);
$wgFileExtensions[] = 'zip';

Viele Grüße
Jan

-----Ursprüngliche Nachricht-----
Von: mediawiki-l-bounces(a)lists.wikimedia.org
[mailto:mediawiki-l-bounces@lists.wikimedia.org] Im Auftrag von DaveM
Gesendet: Freitag, 16. Oktober 2009 13:55
An: mediawiki-l(a)lists.wikimedia.org
Betreff: [Mediawiki-l] How do you allow zip files uploads

I need to configure my wiki to allow uploading of zip files. Now I have
added it to my LocalSettings.php file. However I see that it is still
blacklisted and I need to change this setting in another file. I have done
quite a bit of reading up on this but I am still in the dark as to what file
I need to edit and what I need to edit into it?

_______________________________________________
MediaWiki-l mailing list
MediaWiki-l(a)lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Re: [Mediawiki-l] How do you allow zip files uploads