I've been editing [[Commons:File types]] (the xiph.org press release on Ogg and HTML5 directs to it) and see it lists allowable file formats as of late 2006.
* What's the current list? * Is there a handy place to look it up?
- d.
On Dec 15, 2007 7:51 AM, David Gerard dgerard@gmail.com wrote:
I've been editing [[Commons:File types]] (the xiph.org press release on Ogg and HTML5 directs to it) and see it lists allowable file formats as of late 2006.
- What's the current list?
- Is there a handy place to look it up?
- d.
Wikitech-l mailing list Wikitech-l@lists.wikimedia.org http://lists.wikimedia.org/mailman/listinfo/wikitech-l
By default, 'png', 'gif', 'jpg', 'jpeg' are preferred, and any other type will cause a warning, and these types are not ever allowed: # HTML may contain cookie-stealing JavaScript and web bugs 'html', 'htm', 'js', 'jsb', 'mhtml', 'mht', # PHP scripts may execute arbitrary code on the server 'php', 'phtml', 'php3', 'php4', 'php5', 'phps', # Other types that may be interpreted by some servers 'shtml', 'jhtml', 'pl', 'py', 'cgi', # May contain harmful executables for Windows victims 'exe', 'scr', 'dll', 'msi', 'vbs', 'bat', 'com', 'pif', 'cmd', 'vxd', 'cpl' Also, these MIME types will fail # HTML may contain cookie-stealing JavaScript and web bugs 'text/html', 'text/javascript', 'text/x-javascript', 'application/x-shellscript', # PHP scripts may execute arbitrary code on the server 'application/x-php', 'text/x-php', # Other types that may be interpreted by some servers 'text/x-python', 'text/x-perl', 'text/x-bash', 'text/x-sh', 'text/x-csh', # Windows metafile, client-side vulnerability on some systems 'application/x-msmetafile' You can see this in DefaultSettings.php, a little above line 1600.
Dan Collins wrote:
On Dec 15, 2007 7:51 AM, David Gerard dgerard@gmail.com wrote:
I've been editing [[Commons:File types]] (the xiph.org press release on Ogg and HTML5 directs to it) and see it lists allowable file formats as of late 2006.
- What's the current list?
- Is there a handy place to look it up?
By default, 'png', 'gif', 'jpg', 'jpeg' are preferred, and any other type will cause a warning, and these types are not ever allowed:
That's just the MediaWiki default. David wants to know how it is configured on Commons, and the answer is:
png, gif, jpg, jpeg, xcf, pdf, mid, sxw, sxi, sxc, sxd, ogg, svg, djvu
All other extensions are rejected, $wgStrictFileExtensions=true.
- Is there a handy place to look it up?
No.
-- Tim Starling
On 15/12/2007, Tim Starling tstarling@wikimedia.org wrote:
On Dec 15, 2007 7:51 AM, David Gerard dgerard@gmail.com wrote:
- What's the current list?
That's just the MediaWiki default. David wants to know how it is configured on Commons, and the answer is: png, gif, jpg, jpeg, xcf, pdf, mid, sxw, sxi, sxc, sxd, ogg, svg, djvu All other extensions are rejected, $wgStrictFileExtensions=true.
cool :-) Is there any particular reason ODF files aren't in the list (active content, etc.) or is it just that no-one's asked for them?
- Is there a handy place to look it up?
No.
OK, I'll check back here annually ;-)
- d.
David Gerard wrote:
On 15/12/2007, Tim Starling wrote:
On Dec 15, 2007 7:51 AM, David Gerard wrote:
- What's the current list?
That's just the MediaWiki default. David wants to know how it is configured on Commons, and the answer is: png, gif, jpg, jpeg, xcf, pdf, mid, sxw, sxi, sxc, sxd, ogg, svg, djvu All other extensions are rejected, $wgStrictFileExtensions=true.
cool :-) Is there any particular reason ODF files aren't in the list (active content, etc.) or is it just that no-one's asked for them?
It has been requested since 2005. http://bugzilla.wikimedia.org/show_bug.cgi?id=2089
And private wikis only got them because mav forced the developers to allow ppt & doc ;-)
On 15/12/2007, Platonides Platonides@gmail.com wrote:
It has been requested since 2005. http://bugzilla.wikimedia.org/show_bug.cgi?id=2089
Hmmm. Is there still a threat from zipped ODF files to MSIE? (Isn't there the same threat from OOo 1.x files?)
And private wikis only got them because mav forced the developers to allow ppt & doc ;-)
eww, odious things. I'm not letting them on our work intranet until I can finally get word on which antivirus I'm allowed to use (someone hates ClamAV).
- d.
On 12/15/07, Tim Starling tstarling@wikimedia.org wrote:
- Is there a handy place to look it up?
No.
I've added a list of allowed/prohibited file extensions to Special:Upload in r28530.
On 16/12/2007, Tim Starling tstarling@wikimedia.org wrote:
That's just the MediaWiki default. David wants to know how it is configured on Commons, and the answer is:
png, gif, jpg, jpeg, xcf, pdf, mid, sxw, sxi, sxc, sxd, ogg, svg, djvu
All other extensions are rejected, $wgStrictFileExtensions=true.
- Is there a handy place to look it up?
No.
Isn't it in http://noc.wikimedia.org/conf/CommonSettings.php.html ?
The only thing that doesn't make sense to me is this bit:
if( $wgDBname != 'commonswiki' ) { $wgFileExtensions[] = 'xls'; }
I thought this should mean "all wikis except commons will take XLS, but I just tried uploading a fake XLS file to meta with no luck
cheers Brianna
Brianna Laugher wrote:
Isn't it in http://noc.wikimedia.org/conf/CommonSettings.php.html ?
That's old. That's why I didn't suggest it.
The only thing that doesn't make sense to me is this bit:
if( $wgDBname != 'commonswiki' ) { $wgFileExtensions[] = 'xls'; }
It looks a bit different in my version:
# Disabling this for now -- brion - 2007-08-21 #if( $wgDBname != 'commonswiki' ) { # $wgFileExtensions[] = 'xls'; #}
-- Tim Starling
wikitech-l@lists.wikimedia.org