Allow XML attachments on the forum Topic is solved

[tamlyn]

With the new XML format for packaging modules would it be sensible to allow the xml extension for forum attachments? Or are there security reasons for not allowing it?

[Ted]

It's not any more or less safe than a regular text file, as far as I know.

I can add it.

[Dr.CSS]

what ext. are unsafe?

  mark

[Ted]

exe, bat, com, scr, dll are the ones that come to mind.

[Piratos]

sometimes it is  risky to get xml attachments:

GNOME Evolution allows remote attackers to cause a denial of service
(persistent client crash) via an attached text file that contains
Content-Disposition: inline in the header, and a very long line in
the body, which causes the client to repeatedly crash until the e-mail
message is manually removed, possibly due to a buffer overflow, as
demonstrated using an XML attachment.