Page 1 of 1
Allow XML attachments on the forum
Posted: Sun May 28, 2006 1:18 am
by tamlyn
With the new XML format for packaging modules would it be sensible to allow the xml extension for forum attachments? Or are there security reasons for not allowing it?
Re: Allow XML attachments on the forum
Posted: Sun May 28, 2006 3:18 am
by Ted
It's not any more or less safe than a regular text file, as far as I know.
I can add it.
Re: Allow XML attachments on the forum
Posted: Sun May 28, 2006 1:36 pm
by Dr.CSS
what ext. are unsafe?
mark
Re: Allow XML attachments on the forum
Posted: Mon May 29, 2006 4:26 am
by Ted
exe, bat, com, scr, dll are the ones that come to mind.
Re: Allow XML attachments on the forum
Posted: Mon May 29, 2006 2:44 pm
by Piratos
sometimes it is risky to get xml attachments:
GNOME Evolution allows remote attackers to cause a denial of service
(persistent client crash) via an attached text file that contains
Content-Disposition: inline in the header, and a very long line in
the body, which causes the client to repeatedly crash until the e-mail
message is manually removed, possibly due to a buffer overflow, as
demonstrated using an XML attachment.