disable flash uploading by default

Thanks to Kacper Szurek for reporting this
2014-12-02 16:18:26 +01:00 · 2014-12-02 16:18:26 +01:00 · 778ddf6f2c
parent 32e7ff2a83
commit 778ddf6f2c
1 changed files with 4 additions and 1 deletions
--- a/conf/mime.conf
+++ b/conf/mime.conf
@ -9,7 +9,6 @@ gif     image/gif
 png     image/png
 ico     image/vnd.microsoft.icon

-swf     application/x-shockwave-flash
 mp3     audio/mpeg
 ogg     audio/ogg
 wav     audio/wav
@ -66,3 +65,7 @@ odt     !application/vnd.oasis.opendocument.text
 #xml     text/xml
 #csv     text/csv

+# Also flash may be able to execute arbitrary scripts in the website's
+# context
+#swf     application/x-shockwave-flash
+