Add support for XML in allowed extensions and mime types

[fazalmajid]

As with #12849, please add CSV and XML types to wp_ext2type() or get_allowed_mime_types() in functions.php.

The patch I use on my local install of Wordpress is:

--- wp-includes/functions.php~  Wed Dec 23 19:38:49 2009
+++ wp-includes/functions.php   Wed Dec 30 16:09:13 2009
@@ -2324,6 +2324,10 @@
                'odc' => 'application/vnd.oasis.opendocument.chart',
                'odb' => 'application/vnd.oasis.opendocument.database',
                'odf' => 'application/vnd.oasis.opendocument.formula',
+               'py' => 'application/python',
+               'xml' => 'text/xml',
+               'csv' => 'text/csv',
                ) );
        }

[dd32]

csv has been added already, xml is worth adding, py along with a lot of other programming language files should probably also be added.

[nacin]

Adding programming files could certainly cause these files to be executed. Just think about *.php :-)

[nacin]

*.xml *could* be added as a recognized extension, but not as an allowed extension. Super dangerous and can lead to remote code execution. Better to not add it at all. #24251