Be stricter for file types where we don't know canonical extension
authorBrian Wolff <bawolff+wn@gmail.com>
Mon, 19 Aug 2013 23:41:28 +0000 (16:41 -0700)
committerBrian Wolff <bawolff+wn@gmail.com>
Wed, 21 Aug 2013 17:34:10 +0000 (17:34 +0000)
commit3846d1048766a7a7ba0e5727fb84e464dc1cbb98
tree988d5150a68a4cf9445237e880aa8d188e5f1b4a
parent2305e760f7de7d3053ab310faf0eea79b6d860c9
Be stricter for file types where we don't know canonical extension

Previously if a file had a format, where we didn't have an
extension associated with it in mime.types, people could upload
it with any extension that is in $wgFileExtensions. This meant
people could upload a non-allowed file type if it had an allowed
extension, and the non-allowed file type didn't have a canonical
extension in mime.types

Bug: 39012
Change-Id: Ib373fafdfceceed65fbd23cf468f3c19196545c9
RELEASE-NOTES-1.22
includes/upload/UploadBase.php