Roundup Tracker - Issues

Issue 2550897

classification
Title: Add config option to set whitelist for acceptable mime types. - A better solution for serving html attachments
Type: Severity: normal
Components: Web interface Versions: devel
process
Status: new Resolution:
Dependencies: Superseder:
Assigned To: Nosy List: ber, rouilj
Priority: normal Keywords:

Created on 2015-12-02 20:08 by ber, last changed 2016-07-12 01:03 by rouilj.

Messages
msg5393 Author: [hidden] (ber) Date: 2015-12-02 20:08
In msg5188	of issue2550848 a better solution is outlined.
This is the issue to track it.
msg5838 Author: [hidden] (rouilj) Date: 2016-07-12 01:03
How does the following sound.

We keep the default whitelist and replace allow_html_file with
two options:
  
  # Roundup has a whitelist of mime types that it will serve. If a
  # file's mime type is in the whitelist, it will be served using the
  # mime type. If the file type is not in the whitelist, the file will
  # be served with type application/octet-stream.
  # If you want to override the whitelist, set this to no and set the
  # mime types in serve_mime_types.
  use_default_whitelist = yes

  # A comma separated list of mime types that will be served by roundup.
  # If use_default_whitelist is yes, these will be added to the default
  # whitelist. Otherwise they will be the only types that are not
  # served as application/octet-stream.
  serve_mime_types = 


Thoughts?
History
Date User Action Args
2016-07-12 01:03:45rouiljsetnosy: + rouilj
messages: + msg5838
title: A better solution for serving html attachments -> Add config option to set whitelist for acceptable mime types. - A better solution for serving html attachments
2015-12-02 20:08:58bercreate