[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 Antoine hashar Musso has...@free.fr changed: What|Removed |Added CC||has...@free.fr --- Comment #23 from Antoine hashar Musso has...@free.fr 2012-03-01 10:50:34 UTC --- Can people there have a look at Bug 34797 - Cannot upload Office 97-2003 DOC and XLS files Seems a related issue :-) Thanks! -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 Chad H. innocentkil...@gmail.com changed: What|Removed |Added Version|1.15.1 |1.15.x -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 Derk-Jan Hartman hart...@videolan.org changed: What|Removed |Added Status|NEW |RESOLVED Resolution||FIXED --- Comment #22 from Derk-Jan Hartman hart...@videolan.org 2010-07-06 12:47:35 CEST --- forgot to close the ticket -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #21 from Derk-Jan Hartman hart...@videolan.org 2010-07-02 14:12:31 CEST --- Went with the original solution after all. Fixed in r68873 -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #20 from Derk-Jan Hartman hart...@videolan.org 2010-06-30 21:33:13 CEST --- Created an attachment (id=7534) -- (https://bugzilla.wikimedia.org/attachment.cgi?id=7534) gifar cleanup A patch of what I am proposing: 1: Move zip and virus checks before mime checks 2: ZIP gifar check is now separate from mime checks 3: Added $wgAllowGIFARVulnerableFiles global variable 4: Add zip mime detection support for openxml trailers on 2003 Office files. This will allow people to either choose to basically allow zip files uploads when they want. They would still need to whitelist filetypes, and in the case of actual zip files, they have to change the mime blacklist. But when setting $wgAllowGIFARVulnerableFiles=true and adding .doc .docx .odt to their whitelist, they will be able to upload such files none the less (and actual GIFAR files). We could consider expanding on this to add a best-effort mode to detectGIFAR(), where it will only allow opendocument/openxml files, and disallow the rest, though that is somewhat of a fake security model in my opinion. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #16 from Michael Gsandtner g...@adv.magwien.gv.at 2010-06-26 06:25:04 UTC --- Microsoft seems to create different .doc formats (2003, 2003 from 2007). Should not simply be seen this as a Microsoft bug, and longer be a mediawiki issue ? -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #17 from Derk-Jan Hartman hart...@videolan.org 2010-06-26 14:18:45 CEST --- (In reply to comment #15) (In reply to comment #14) $wgAllowZipFilesWhichCouldCompromiseMyUsers ? I'd like to have Special:Upload ask to remove the (apparently useless) zip trailer. Would that not damage the files if people wanted to download and reopen them, some systems are very pedantic about the formatting of their files? If I understand correctly, the OPC trailer stores information that can not be saved in the 2003 format. So it is a method of creating a 2003 compatible file that still has all the 2007 and later features of the original file when opened in 2007 or later. Actually kinda handy I have to say. but yes, the idea would be $wgAllowUploadsOfZipFilesBecauseItrustMyUploaders or something. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #18 from Platonides platoni...@gmail.com 2010-06-26 13:50:10 UTC --- (In reply to comment #14) Would that not damage the files if people wanted to download and reopen them, some systems are very pedantic about the formatting of their files? The newer Word still need to open pre-2007 files which don't have the trailer so no backwards compatibility issues there. The provided trialer contains a font Theme. That won't be a fundamental feature in most cases but some users might need it. Note that while I support file stripping in certain cases, it should always happen with the uploader consent. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #19 from Bryan Tong Minh bryan.tongm...@gmail.com 2010-06-26 14:00:19 UTC --- (In reply to comment #18) Note that while I support file stripping in certain cases, it should always happen with the uploader consent. And the user should have the possibility to upload the unstripped file (if allowed by the site administrator). A generic upload post processing API would be nice; other things like image rotation from EXIF info falls in that category as well. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #14 from Platonides platoni...@gmail.com 2010-06-25 18:39:59 UTC --- $wgAllowZipFilesWhichCouldCompromiseMyUsers ? I'd like to have Special:Upload ask to remove the (apparently useless) zip trailer. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #15 from p858snake p858sn...@yahoo.com.au 2010-06-26 01:00:23 UTC --- (In reply to comment #14) $wgAllowZipFilesWhichCouldCompromiseMyUsers ? I'd like to have Special:Upload ask to remove the (apparently useless) zip trailer. Would that not damage the files if people wanted to download and reopen them, some systems are very pedantic about the formatting of their files? -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #12 from Bryan Tong Minh bryan.tongm...@gmail.com 2010-06-24 08:50:17 UTC --- (In reply to comment #11) Should we really be doing this? we don't allow openoffice files which are also zips because of security vulnerabilities which would be a bit weird if we preferred Word over OO. Users who wish to enable OpenXML files, should be able to do so, just like with OpenOffice now. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #13 from Derk-Jan Hartman hart...@videolan.org 2010-06-24 18:23:07 CEST --- I got this working, but it is starting to become a bit of a mess. I'm considering introducing a new configuration variable to allow/disallow all zip types, because i already have: ODF, OpenXML, MS Office+OPC zip trailer and setting all that up will start to become more difficult for each and every zip type. With a seperate option, we could just remove the zip and the fake opc mime from the mimeblacklist and adding a seperate config option will make documenting and explaining the risks of zip based fileformats on open websites a lot easier I think. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #4 from Michael Gsandtner g...@adv.magwien.gv.at 2010-06-23 06:13:51 UTC --- Created an attachment (id=7497) -- (https://bugzilla.wikimedia.org/attachment.cgi?id=7497) word 2007 testdocument -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #5 from Michael Gsandtner g...@adv.magwien.gv.at 2010-06-23 06:15:06 UTC --- I did it exactly as you described, here the debug: File::getPropsFromPath: Getting file info for /tmp/phplRPqef MimeMagic::__construct: loading mime types from /magwien/var/gondor-phpserver/html/mwiki/includes/mime.types MimeMagic::__construct: loading mime info from /magwien/var/gondor-phpserver/html/mwiki/includes/mime.info MimeMagic::doGuessMimeType: ZIP header present at end of /tmp/phplRPqef MimeMagic::detectZipType: /^mimetype(application\/vnd\.oasis\.opendocument\.(?:chart-template|chart|formula-template|formula|graphics-template|graphics|image-template|image|presentation-template|presentation|spreadsheet-template|spreadsheet|text-template|text-master|text-web|text))/ MimeMagic::detectZipType: unable to identify type of ZIP archive MimeMagic::guessMimeType: final mime type of /tmp/phplRPqef: application/zip MediaHandler::getHandler: no handler found for application/zip. File::getPropsFromPath: /tmp/phplRPqef loaded, 453632 bytes, application/zip. MacBinary::loadHeader: header bytes 0 and 74 not null MimeMagic::doGuessMimeType: ZIP header present at end of /tmp/phplRPqef MimeMagic::detectZipType: /^mimetype(application\/vnd\.oasis\.opendocument\.(?:chart-template|chart|formula-template|formula|graphics-template|graphics|image-template|image|presentation-template|presentation|spreadsheet-template|spreadsheet|text-template|text-master|text-web|text))/ MimeMagic::detectZipType: unable to identify type of ZIP archive MimeMagic::guessMimeType: final mime type of /tmp/phplRPqef: application/zip mime: application/zip extension: docx UploadBase::verifyExtension: mime type application/zip mismatches file extension docx, rejecting file Perhaps you can take a look at the attached Testdocument, may be it is not in the format you expect. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 OverlordQ overlo...@gmail.com changed: What|Removed |Added CC||overlo...@gmail.com --- Comment #6 from OverlordQ overlo...@gmail.com 2010-06-23 06:23:51 UTC --- (In reply to comment #3) Although I have to say, that i'm expecting to see detected an Open Packaging Conventions archive: for these types of files in debug. That'd be kinda hard to do since it's just a zip file, it'd have to look inside the file to determine if it's just a zip or if it's a 'special' zip. That just opens a whole 'nother can of worms. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #7 from Derk-Jan Hartman hart...@videolan.org 2010-06-23 14:08:36 CEST --- Looking at this file, but it doesn't seem to be an openXML file to me. Will take some time to figure out what is going on. (zipped .doc perhaps ?) -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 OverlordQ overlo...@gmail.com changed: What|Removed |Added Attachment #7497|0 |1 is obsolete|| --- Comment #8 from OverlordQ overlo...@gmail.com 2010-06-23 15:21:26 UTC --- Created an attachment (id=7500) -- (https://bugzilla.wikimedia.org/attachment.cgi?id=7500) Actual docx file Testbericht_V02.docx: Microsoft Office Document If you rename it to .doc it opens fine in word so I'm thinking it's a normal Word Document, resaved as Word Document in Word 2007 and now it identifies as Testbericht_V02.docx: Zip archive data, at least v2.0 to extract -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 Platonides platoni...@gmail.com changed: What|Removed |Added CC||platoni...@gmail.com --- Comment #9 from Platonides platoni...@gmail.com 2010-06-23 15:25:13 UTC --- I think that when saving in the old format, Word 2007 creates a kind of mixed format, by appending a zip structure to the .doc format. warning [Testbericht_V02.docx]: 430308 extra bytes at beginning or within zipfile Also see bug 23642 comment 5. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #10 from Derk-Jan Hartman hart...@videolan.org 2010-06-23 22:32:17 CEST --- Platonides is right. Basically, 2007 saves a .doc file, but appends a .zip with OPC index to it. I'll add a check for this, by scanning for the magic bytes of older MS Office documents in some way. http://www.garykessler.net/library/file_sigs.html MSOffice header: D0 CF 11 E0 A1 B1 1A E1 Office subheaders at bytepos 512 EC A5 C1 00 [512 byte offset] DOC Word document subheader (MS Office) FD FF FF FF nn 00 00 00 [512 byte offset] PPT PowerPoint presentation subheader (MS Office) (where nn has been seen with values 0x0E, 0x1C, and 0x43) FD FF FF FF nn 00 [512 byte offset] or FD FF FF FF nn 02 [512 byte offset] XLS Excel spreadsheet subheader (MS Office) (where nn = 0x10, 0x1F, 0x22, 0x23, 0x28, or 0x29) -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 p858snake p858sn...@yahoo.com.au changed: What|Removed |Added CC||p858sn...@yahoo.com.au --- Comment #11 from p858snake p858sn...@yahoo.com.au 2010-06-24 01:03:31 UTC --- Should we really be doing this? we don't allow openoffice files which are also zips because of security vulnerabilities which would be a bit weird if we preferred Word over OO. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 Bryan Tong Minh bryan.tongm...@gmail.com changed: What|Removed |Added CC||hart...@videolan.org --- Comment #1 from Bryan Tong Minh bryan.tongm...@gmail.com 2010-06-22 16:59:01 UTC --- Can you try the current 1.17alpha SVN version? cc. TheDJ -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #2 from Michael Gsandtner g...@adv.magwien.gv.at 2010-06-22 18:10:47 UTC --- Behaviour does not change with 1.17alpha: FileCache negative MISS for Testbericht_V02.doc File::getPropsFromPath: Getting file info for /tmp/phpW9YCXV MimeMagic::__construct: loading mime types from /magwien/var/gondor-phpserver/html/wiki-ma48/includes/mime.types MimeMagic::__construct: loading mime info from /magwien/var/gondor-phpserver/html/wiki-ma48/includes/mime.info MimeMagic::doGuessMimeType: ZIP header present at end of /tmp/phpW9YCXV MimeMagic::detectZipType: /^mimetype(application\/vnd\.oasis\.opendocument\.(?:chart-template|chart|formula-template|formula|graphics-template|graphics|image-template|image|presentation-template|presentation|spreadsheet-template|spreadsheet|text-template|text-master|text-web|text))/ MimeMagic::detectZipType: unable to identify type of ZIP archive MimeMagic::guessMimeType: final mime type of /tmp/phpW9YCXV: application/zip MediaHandler::getHandler: no handler found for application/zip. File::getPropsFromPath: /tmp/phpW9YCXV loaded, 453632 bytes, application/zip. MacBinary::loadHeader: header bytes 0 and 74 not null MimeMagic::doGuessMimeType: ZIP header present at end of /tmp/phpW9YCXV MimeMagic::detectZipType: /^mimetype(application\/vnd\.oasis\.opendocument\.(?:chart-template|chart|formula-template|formula|graphics-template|graphics|image-template|image|presentation-template|presentation|spreadsheet-template|spreadsheet|text-template|text-master|text-web|text))/ MimeMagic::detectZipType: unable to identify type of ZIP archive MimeMagic::guessMimeType: final mime type of /tmp/phpW9YCXV: application/zip mime: application/zip extension: doc UploadForm::verifyExtension: mime type application/zip mismatches file extension doc, rejecting file -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
[Bug 24073] cannot upload ms word 2007 files
https://bugzilla.wikimedia.org/show_bug.cgi?id=24073 --- Comment #3 from Derk-Jan Hartman hart...@videolan.org 2010-06-22 20:26:49 CEST --- The extension for MS Office 2007 OpenXML documents is .docx not .doc For this to work: * rename the file to it's proper file extension * you have to have a 1.17 checkout * overwrite $wgMimeTypeBlacklist, so that application/x-opc+zip is not in the list * Add .docx to the list of allowed filetype extensions. $wgFileExtensions Although I have to say, that i'm expecting to see detected an Open Packaging Conventions archive: for these types of files in debug. -- Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email --- You are receiving this mail because: --- You are the assignee for the bug. You are on the CC list for the bug. ___ Wikibugs-l mailing list Wikibugs-l@lists.wikimedia.org https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
