| Index: trunk/phase3/includes/DefaultSettings.php |
| — | — | @@ -1475,7 +1475,7 @@ |
| 1476 | 1476 | /** Files with these extensions will never be allowed as uploads. */ |
| 1477 | 1477 | $wgFileBlacklist = array( |
| 1478 | 1478 | # HTML may contain cookie-stealing JavaScript and web bugs |
| 1479 | | - 'html', 'htm', 'js', 'jsb', |
| | 1479 | + 'html', 'htm', 'js', 'jsb', 'mhtml', 'mht', |
| 1480 | 1480 | # PHP scripts may execute arbitrary code on the server |
| 1481 | 1481 | 'php', 'phtml', 'php3', 'php4', 'php5', 'phps', |
| 1482 | 1482 | # Other types that may be interpreted by some servers |
| Index: trunk/phase3/RELEASE-NOTES |
| — | — | @@ -64,9 +64,8 @@ |
| 65 | 65 | * Show result of Special:Booksources in wiki content language always, it's |
| 66 | 66 | normally better maintained than the generic list from the standard message |
| 67 | 67 | files |
| 68 | | -* (bug 7997) Added ability of sysops to block users from sending e-mail via |
| 69 | | - Special:Emailuser. This can be disabled by setting $wgSysopEmailBans to |
| 70 | | - false. |
| | 68 | +* (bug 7997) Allow users to be blocked from using Special:Emailuser |
| | 69 | +* (bug 8989) Blacklist 'mhtml' and 'mht' files from upload |
| 71 | 70 | |
| 72 | 71 | == Bugfixes since 1.10 == |
| 73 | 72 | |