diff options
| author | Andreas Gohr <gohr@cosmocode.de> | 2014-12-02 16:18:26 +0100 |
|---|---|---|
| committer | Guy Brand <gb@unistra.fr> | 2014-12-03 15:43:36 +0100 |
| commit | 778ddf6f2cd9ed38b9db2d73e823b8c21243a960 (patch) | |
| tree | d96fcefab5989b7dd4236f9fa66829dc0707517a | |
| parent | 32e7ff2a834c7dcb0174ea62ba9b84965f23ceda (diff) | |
| download | rpg-778ddf6f2cd9ed38b9db2d73e823b8c21243a960.tar.gz rpg-778ddf6f2cd9ed38b9db2d73e823b8c21243a960.tar.bz2 | |
disable flash uploading by default
Thanks to Kacper Szurek for reporting this
| -rw-r--r-- | conf/mime.conf | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/conf/mime.conf b/conf/mime.conf index 2a50fab10..c2e03b775 100644 --- a/conf/mime.conf +++ b/conf/mime.conf @@ -9,7 +9,6 @@ gif image/gif png image/png ico image/vnd.microsoft.icon -swf application/x-shockwave-flash mp3 audio/mpeg ogg audio/ogg wav audio/wav @@ -66,3 +65,7 @@ odt !application/vnd.oasis.opendocument.text #xml text/xml #csv text/csv +# Also flash may be able to execute arbitrary scripts in the website's +# context +#swf application/x-shockwave-flash + |