Dzahn has submitted this change and it was merged.

Change subject: Gerrit: explicitly whitelist image formats we want to display
......................................................................


Gerrit: explicitly whitelist image formats we want to display

Some like svg might be dangerous :)

Bug: 70892
Change-Id: I1fa29e6e1419913f75f57acae55f912c70d42783
---
M templates/gerrit/gerrit.config.erb
1 file changed, 9 insertions(+), 1 deletion(-)

Approvals:
  CSteipp: Looks good to me, but someone else must approve
  jenkins-bot: Verified
  Dzahn: Looks good to me, approved



diff --git a/templates/gerrit/gerrit.config.erb 
b/templates/gerrit/gerrit.config.erb
index 3444f48..510af68 100644
--- a/templates/gerrit/gerrit.config.erb
+++ b/templates/gerrit/gerrit.config.erb
@@ -98,7 +98,15 @@
     safe = true
 [mimetype "application/x-php"]
     safe = true
-[mimetype "image/*"]
+[mimetype "image/bmp"]
+    safe = true
+[mimetype "image/gif"]
+    safe = true
+[mimetype "image/jpeg"]
+    safe = true
+[mimetype "image/tiff"]
+    safe = true
+[mimetype "image/x-icon"]
     safe = true
 [mimetype "text/css"]
     safe = true

-- 
To view, visit https://gerrit.wikimedia.org/r/165602
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I1fa29e6e1419913f75f57acae55f912c70d42783
Gerrit-PatchSet: 2
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Chad <[email protected]>
Gerrit-Reviewer: CSteipp <[email protected]>
Gerrit-Reviewer: Dzahn <[email protected]>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to