Skip to content
This repository was archived by the owner on Jan 6, 2023. It is now read-only.
This repository was archived by the owner on Jan 6, 2023. It is now read-only.

File renaming makes upload restriction pointless #2413

@ji-ava

Description

@ji-ava

It's possible to edit a file item and change the name. This change does not seem to check the Mimetype Whitelist, which means the latter feature is basically pointless – I can upload any file I want by setting the name to an allowed extension and then changing it back after upload.

Observed with v8.4.0 – I don't have a v9 instance available to check if this is still the case.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions