WP_Customize_Media_Control mime_type parameter

[IstanbulMMV]

The WP_Customize_Media_Control mime_type parameter filters media modal output correctly but still enables the user to upload a file type that does not meet the mine_type stipulation.

Example code:

function site_logo_customizer_control( $wp_customize ) {
        $wp_customize->add_setting( 'custom_site_logo', array(       
                'sanitize_callback'     => 'absint',
                'type'                  => 'option',
        ) );

        $wp_customize->add_control( new WP_Customize_Media_Control( $wp_customize, 'custom_site_logo', array(
		'section'       => 'title_tagline',
		'settings'      => 'custom_site_logo',
                'label'         => __( 'Site Logo' ),
                'mime_type'     => array('image/jpeg','image/gif','image/png'),
                'priority'      => 30,
	) ) );
}
add_action( 'customize_register', 'site_logo_customizer_control' );

[westonruter]

This was introduced in #21483, in changeset [30309].

@celloexpressions Can you advise?

[celloexpressions]

This is a limitation of the media modal - the library can be filtered to only show a particular type of content, but anything can be uploaded. I'm not sure if there's an easy way to change that specifically for customizer controls, but this may need to be a media ticket instead, that could then implement any changes back in the Customizer.

In terms of UX, it would probably be good if inappropriate file types are rejected on upload here.

[celloexpressions]

This is a duplicate of #33713, which has a patch.