Woff uploading fails, even added to upload_mimes filter

[matthewdietsche]

Before 5.0.1, users could upload .woff files to their media library. Now uploads of that filetype are rejected with a security warning, even if added using the upload_mimes filter.

[matthewdietsche]

I believe this is due to the fact that PHP's fileinfo (maybe only on particular versions of PHP?), incorrectly returns the mime type of woff files as "application/octet-stream". The way WordPress handles files with that mime type changed in 5.0.1 to ignore them unless they were one of a few, specific file types, regardless of the upload_mimes contents.

[iandunn]

Hi Matthew, thanks for the details. This is affecting several different file types, but has a common cause, so we're tracking them all in #45615.

Please check that ticket out if you'd like to follow along, help write or test patches, etc :)

xref: ​https://make.wordpress.org/core/2018/12/13/backwards-compatibility-breaks-in-5-0-1/