[ https://issues.apache.org/jira/browse/OFBIZ-12049?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17245747#comment-17245747 ]
ASF subversion and git services commented on OFBIZ-12049: --------------------------------------------------------- Commit c95a6dbe8d72b395fd5267c98fbc357ed762ad38 in ofbiz-framework's branch refs/heads/release18.12 from Jacques Le Roux [ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=c95a6db ] Improved: Adds the HTML <input> accept Attribute in form widgets and Freemaker templates (OFBIZ-12049) As explained at https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/accept this is only an help for the users (ie not a security feature), but an appreciable one easy to implement. Here we start with website/WebSiteCMSContent.ftl Also add some missing file extensions > Adds the HTML <input> accept Attribute in form widgets and Freemaker templates > ------------------------------------------------------------------------------ > > Key: OFBIZ-12049 > URL: https://issues.apache.org/jira/browse/OFBIZ-12049 > Project: OFBiz > Issue Type: Improvement > Components: ALL COMPONENTS > Affects Versions: Trunk > Reporter: Jacques Le Roux > Assignee: Jacques Le Roux > Priority: Minor > > As explained at > https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes/accept this is > only an help for the users, but an appreciable one easy to implement: > bq. The accept attribute doesn't validate the types of the selected files; it > simply provides hints for browsers to guide users towards selecting the > correct file types. It is still possible (in most cases) for users to toggle > an option in the file chooser that makes it possible to override this and > select any file they wish, and then choose incorrect file types. Because of > this, you should make sure that expected requirement is validated server-side. -- This message was sent by Atlassian Jira (v8.3.4#803005)