Chad has uploaded a new change for review.
https://gerrit.wikimedia.org/r/165602
Change subject: Gerrit: explicitly whitelist image formats we want to display
......................................................................
Gerrit: explicitly whitelist image formats we want to display
Some like svg might be dangerous :)
Change-Id: I1fa29e6e1419913f75f57acae55f912c70d42783
---
M templates/gerrit/gerrit.config.erb
1 file changed, 5 insertions(+), 1 deletion(-)
git pull ssh://gerrit.wikimedia.org:29418/operations/puppet
refs/changes/02/165602/1
diff --git a/templates/gerrit/gerrit.config.erb
b/templates/gerrit/gerrit.config.erb
index 3444f48..936937c 100644
--- a/templates/gerrit/gerrit.config.erb
+++ b/templates/gerrit/gerrit.config.erb
@@ -98,7 +98,11 @@
safe = true
[mimetype "application/x-php"]
safe = true
-[mimetype "image/*"]
+[mimetype "image/png"]
+ safe = true
+[mimetype "image/gif"]
+ safe = true
+[mimetype "image/jpg"]
safe = true
[mimetype "text/css"]
safe = true
--
To view, visit https://gerrit.wikimedia.org/r/165602
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings
Gerrit-MessageType: newchange
Gerrit-Change-Id: I1fa29e6e1419913f75f57acae55f912c70d42783
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chad <[email protected]>
_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits