[pmwiki-users] PmWiki default upload file formats

[Petko Yotov]

On Monday 31 October 2011 17:43:30, Patrick R. Michaud wrote :
> On Mon, Oct 31, 2011 at 04:44:03PM +0100, Eric Forgeot wrote:
> > and therefore more open format should be added by default:

> I have no problem with the notion of updating the list.

Added for the next version.

> Before adding any of the above to the defaults, let's be
> careful/certain that they don't add increased security risks.

The .svg format can contain scripting (JavaScript) but so can .html and .pdf 
which are allowed. (Other possibly harmful but allowed formats like windows 
executables and office documents normally are not opened inside the browser 
and require user intervention.)

Petko