← Back to team overview

mahara-contributors team mailing list archive

[Bug 1855351] [NEW] Allow the site to restrict what files are allowed to be uploaded

 

Public bug reported:

Currently a site can allow users to upload any file type.

But in some cases Mahara sites would want to restrict what can be
uploaded to avoid users uploading malicious files or files that serve no
purpose for portfolio creation, eg .bat or .exe files

To avoid this we could have a config.php setting that whitelists what
file extensions are ok and display to the user what files extensions are
allowed

** Affects: mahara
     Importance: Wishlist
     Assignee: Robert Lyon (robertl-9)
         Status: In Progress

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1855351

Title:
  Allow the site to restrict what files are allowed to be uploaded

Status in Mahara:
  In Progress

Bug description:
  Currently a site can allow users to upload any file type.

  But in some cases Mahara sites would want to restrict what can be
  uploaded to avoid users uploading malicious files or files that serve
  no purpose for portfolio creation, eg .bat or .exe files

  To avoid this we could have a config.php setting that whitelists what
  file extensions are ok and display to the user what files extensions
  are allowed

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1855351/+subscriptions


Follow ups