Chad has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/165602

Change subject: Gerrit: explicitly whitelist image formats we want to display
......................................................................

Gerrit: explicitly whitelist image formats we want to display

Some like svg might be dangerous :)

Change-Id: I1fa29e6e1419913f75f57acae55f912c70d42783
---
M templates/gerrit/gerrit.config.erb
1 file changed, 5 insertions(+), 1 deletion(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/02/165602/1

diff --git a/templates/gerrit/gerrit.config.erb 
b/templates/gerrit/gerrit.config.erb
index 3444f48..936937c 100644
--- a/templates/gerrit/gerrit.config.erb
+++ b/templates/gerrit/gerrit.config.erb
@@ -98,7 +98,11 @@
     safe = true
 [mimetype "application/x-php"]
     safe = true
-[mimetype "image/*"]
+[mimetype "image/png"]
+    safe = true
+[mimetype "image/gif"]
+    safe = true
+[mimetype "image/jpg"]
     safe = true
 [mimetype "text/css"]
     safe = true

-- 
To view, visit https://gerrit.wikimedia.org/r/165602
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I1fa29e6e1419913f75f57acae55f912c70d42783
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chad <[email protected]>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to