Consider allowing more extensions for software file uploads

IMAGINARY / imaginary-web

Imaginary website (Drupal 7)

GNU General Public License v2.0

3 stars 0 forks source link

Consider allowing more extensions for software file uploads #140

Open elondaits opened 7 years ago

elondaits commented 7 years ago

@HexeBianca wrote:

note from a MPE competition participant: you currently only allow .zip as a file extension, you might consider also allowing the other popular endings for archives, like .gz, .tar, .rar, and so on.

Investigate if there are any possible security downsides and enable .gz and .tgz. Probably not rar, which is a propietary file format.