Opened 4 years ago

Closed 4 years ago

Last modified 3 years ago

#11051 closed defect (bug) (fixed)

Add .flv to the upload whitelist

Reported by: rustang289 Owned by:
Priority: normal Milestone: 2.9
Component: Upload Version: 2.8.5
Severity: normal Keywords: has-patch
Cc:

Description

After doing the wordpress update from WordPress 2.8.4 to ver 2.8.5
I get an error "File type does not meet security guidelines. Try another." while trying to upload a media file .flv. The upload works fine on verion 2.8.4 . I did a fresh wordpress install of 2.8.4 and had no problems I then did an imidiate upgrade to 2.8.5 and tried to upload the same file again and thats when I got the error. There are no plugins installed and no extra themes.

Attachments (2)

11051.patch (442 bytes) - added by hakre 4 years ago.
flv added
mylyn-context.zip (2.8 KB) - added by hakre 4 years ago.
mylyn/context/zip

Download all attachments as: .zip

Change History (10)

comment:1   dd324 years ago

  • Milestone Unassigned deleted
  • Resolution set to invalid
  • Status changed from new to closed

This is a "new" security function, Only whitelisted filetypes may be uploaded by all users (admins included), Previously, This only applied to non-administrators.

See #10692 for where it was done, and a link to a plugin to add file types to the whitelist.

Feel free to open tickets to add any other safe files which should be whitelisted.

To restore pre-2.8.5 behaviour, you may add this to the wp-config.php file:

define('ALLOW_UNFILTERED_UPLOADS', true);

comment:2   dd324 years ago

  • Keywords needs-patch added
  • Milestone set to 2.9
  • Resolution invalid deleted
  • Status changed from closed to reopened

Oh, I missed the fact you mentioned .flv..

I think that should probably be added to the whitelist functionality.

Here are the current items whitelisted: http://core.trac.wordpress.org/browser/trunk/wp-includes/functions.php#L2229

comment:3   dd324 years ago

  • Summary changed from upload problem to Add .flv to the upload whitelist

There is a plugin available which allows you to manage the list of white listed file types

http://wordpress.org/extend/plugins/pjw-mime-config/

hakre4 years ago

flv added

hakre4 years ago

mylyn/context/zip

Mutliple other video formats and even swf is on the whitelist. Therfore flv should be as well. This will increase usability w/o the need to configure. Not that I'm such a flashy adobe fanboy, it's used by other apps as well, just to keep that clear.

Filename extension: .flv
Internet media type: video/x-flv
Source

I added it to the list in the patch.

  • Keywords has-patch added; needs-patch removed
  • Resolution set to fixed
  • Status changed from reopened to closed

(In [12239]) Add video/x-flv to mime types, props hakre, fixes #11051

Related: #7225

Note: See TracTickets for help on using tickets.