New subject: [Mediawiki-l] How do you allow zip files uploads

16 Oct 2009


      Hello,
.zip files are locked in $wgMimeTypeBlacklist because .zip can be a security
hole.
If you really want to enable the upload, add this to LocalSettings.php:
$wgMimeTypeBlacklist= array(
    # HTML may contain cookie-stealing JavaScript and web bugs
    'text/html', 'text/javascript', 'text/x-javascript',
'application/x-shellscript',
    # PHP scripts may execute arbitrary code on the server
    'application/x-php', 'text/x-php',
    # Other types that may be interpreted by some servers
    'text/x-python', 'text/x-perl', 'text/x-bash', 'text/x-sh',
'text/x-csh',
    # Windows metafile, client-side vulnerability on some systems
    'application/x-msmetafile',
);
$wgFileExtensions[] = 'zip';
Viele Grüße
Jan
-----Ursprüngliche Nachricht-----
Von: mediawiki-l-bounces@lists.wikimedia.org
[mailto:mediawiki-l-bounces@lists.wikimedia.org] Im Auftrag von DaveM
Gesendet: Freitag, 16. Oktober 2009 13:55
An: mediawiki-l@lists.wikimedia.org
Betreff: [Mediawiki-l] How do you allow zip files uploads
I need to configure my wiki to allow uploading of zip files. Now I have
added it to my LocalSettings.php file. However I see that it is still
blacklisted and I need to change this setting in another file. I have done
quite a bit of reading up on this but I am still in the dark as to what file
I need to edit and what I need to edit into it?
_______________________________________________
MediaWiki-l mailing list
MediaWiki-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-l

Re: [Mediawiki-l] How do you allow zip files uploads