?
avatar PhilETaylor
PhilETaylor
16 Jun 2020

Steps to reproduce the issue

Probably a won't fix but hey Ill report anyway...

Joomla 4.0.0 beta 1
http://example.rocks/administrator/index.php?option=com_config&view=component&component=com_media

Enter nosuch/mimetypeexists for the mime types

Screenshot 2020-06-16 at 21 30 01

Click Save

Expected result

Validation of the mime types against a predefined definitive list of mime types assigned http://www.iana.org/assignments/media-types/media-types.xhtml

Actual result

No validation.

Additional comments

I guess there might be two camps here...

avatar PhilETaylor PhilETaylor - open - 16 Jun 2020
avatar joomla-cms-bot joomla-cms-bot - change - 16 Jun 2020
Labels Added: ?
avatar joomla-cms-bot joomla-cms-bot - labeled - 16 Jun 2020
avatar PhilETaylor PhilETaylor - change - 16 Jun 2020
The description was changed
avatar PhilETaylor PhilETaylor - edited - 16 Jun 2020
avatar brianteeman
brianteeman - comment - 25 Apr 2021

I would say that this should be a won't fix.

avatar Fedik Fedik - change - 25 Apr 2021
Status New Closed
Closed_Date 0000-00-00 00:00:00 2021-04-25 16:27:04
Closed_By Fedik
avatar Fedik Fedik - close - 25 Apr 2021
avatar Fedik
Fedik - comment - 25 Apr 2021

It is valid mime type nosuch/mimetypeexists if you write the app that produce such files ?
https://stackoverflow.com/a/3828381/1000711

Nothing to fix here.

avatar PhilETaylor
PhilETaylor - comment - 25 Apr 2021

Wrong. nosuch/mimetypeexists is not a valid mime type until it is assigned and listed by the IANA.

[RFC2046] specifies that Media Types (formerly known as MIME types) and Media
Subtypes will be assigned and listed by the IANA.

Procedures for registering Media Types can be found in [RFC6838], [RFC4289],
and [RFC6657].

Additional procedures for registering media types for transfer via
Real-time Transport Protocol (RTP) can be found in [RFC4855].

avatar Fedik
Fedik - comment - 25 Apr 2021

Anyway, there is no good reason to spend a time on it. We does not developing an email server or anything else that require strict mime types validation.

avatar PhilETaylor
PhilETaylor - comment - 25 Apr 2021

anything else that require strict mime types validation.

LMAO that is literally the point of this field in the form. For security, to check strict for illegal mime types for security reasons hahaha

I agree though there there are more important things to spend time on ... ;-)

avatar PhilETaylor
PhilETaylor - comment - 25 Apr 2021

@brianteeman Please can you rewrite the sentence:

"A comma separated list of illegal MIME types to upload (blacklist)"

as it makes no sense at the moment.

avatar Fedik
Fedik - comment - 25 Apr 2021

LMAO that is literally the point of this field in the form. For security, to check strict for illegal mime types for security reasons

In our context "illegal mime" means "not allowed mimes", not illegal from IANA point of view ;)
This English so confusing ;)

Add a Comment

Login with GitHub to post a comment