[wp-trac] [WordPress Trac] #11946: Ensure image MIME type matches extension
WordPress Trac
wp-trac at lists.automattic.com
Wed Jan 20 22:32:03 UTC 2010
#11946: Ensure image MIME type matches extension
--------------------------+-------------------------------------------------
Reporter: Viper007Bond | Owner:
Type: defect (bug) | Status: new
Priority: lowest | Milestone: 2.9.2
Component: Upload | Version: 3.0
Severity: minor | Keywords: has-patch tested
--------------------------+-------------------------------------------------
Comment(by Viper007Bond):
Replying to [comment:6 ShaneF]:
> This is a potential security problem. Recommending 2.9.2 release fix.
I can't think of a way to validate other extensions though, i.e. say a EXE
uploaded as an AVI.
--
Ticket URL: <http://core.trac.wordpress.org/ticket/11946#comment:7>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software
More information about the wp-trac
mailing list