Page MenuHomePhabricator

[Wish] allow .kvtml files for Wikiversity
Closed, DeclinedPublic

Description

Author: matthias

Description:
.kvtml are the datafiles of KVocTrain - a free vocabulary trainer
It is currently not allowed to upload those to de.wikiversity.org


Version: unspecified
Severity: enhancement
URL: http://edu.kde.org/contrib/kvtml.php

Details

Reference
bz11332

Event Timeline

bzimport raised the priority of this task from to Lowest.Nov 21 2014, 9:59 PM
bzimport set Reference to bz11332.
bzimport added a subscriber: Unknown Object (MLST).

jeluf wrote:

In order to allow this datatype, we need some way to tell whether a file uploaded with this suffix is really of that datatype. This is needed so that it's not possible to send evil HTML or JavaScript to MSIE.

[ removed "shell" keyword, coding is needed first ]

matthias wrote:

After reading the MediaWiki manual I found Includes/mime.info and added
line 108: text/xml xml xsl xslt rss rdf kvtml

to LocalSettings.php I added
$wgFileExtensions[] = 'kvtml';

What else has to be adjusted or created for a secure file-upload?

matthias wrote:

I'd like to cancel my request as the project moved to
http://www.wikischool.de/wiki/Vokabeln