Bug#716957: [Pkg-mediawiki-devel] Bug#716957: [mediawiki] Upload of pdf files via IE still possible under default settings

2013-07-16 Thread Chris Steipp
ttings.php > I'm using the regular Special:Upload page > > $wgEnableUploads = true; > $wgCheckFileExtensions = false; > $wgGroupPermissions['*']['createaccount'] = false; > $wgGroupPermissions['*']['edit'] = false; > $wgGroupPermission

Bug#716957: [Pkg-mediawiki-devel] Bug#716957: [mediawiki] Upload of pdf files via IE still possible under default settings

2013-07-15 Thread Chris Steipp
Hi, I'm working on reproducing this. The file extension is checked in UploadBase::getTitle(). If $wgCheckFileExtensions and $wgStrictFileExtensions are both true (which by default they are), then the file should be rejected during the upload process. If that check is being bypassed, then we have a