Moved the IE content type checks to their own class. Disassembled IE 5 and 6 and...
authorTim Starling <tstarling@users.mediawiki.org>
Fri, 12 Dec 2008 15:06:35 +0000 (15:06 +0000)
committerTim Starling <tstarling@users.mediawiki.org>
Fri, 12 Dec 2008 15:06:35 +0000 (15:06 +0000)
commitea471f0d797c8213db981efe5ad0d393237d9d6f
tree29180491b54457572ca594957827c22063f9540c
parent948dea205e40fb15e90f165850c1de61babbd113
Moved the IE content type checks to their own class. Disassembled IE 5 and 6 and added the results to the class. The entry points now return an array giving MIME types for all versions. The most important version difference is the introduction of an early check for PNG headers in IE 7. Added application/x-msdownload to disallowed types, haven't been able to reproduce any vulnerability, but it's better to be on the safe side.
includes/AutoLoader.php
includes/DefaultSettings.php
includes/IEContentAnalyzer.php [new file with mode: 0644]
includes/MimeMagic.php
includes/specials/SpecialUpload.php