Uploaded image for project: 'Hippo CMS'
  1. Hippo CMS
  2. CMS-14624

Assets validation: mimetype validation not applied

    XMLWordPrintable

Details

    • 0
    • Quasar
    • Puma Sprint 263, Puma sprint 271, Puma sprint 272

    Description

      mimetypes.allowed isn't taken into account when validating uploads.
      Method in org.hippoecm.frontend.plugins.yui.upload.validation.DefaultUploadValidationService#validateMimeType just validates if mimetype is ok against some
      pre defined mimetypes instead.

      See 'mimetypes.allowed' at
      https://documentation.bloomreach.com/14/library/concepts/editor-interface/image-and-asset-upload-validation.html

      There seems to be a check for images, but not for assets.

      Estimate:

      • Dev: 1
      • QA: .25
      Forward port to SaaS

      This needs to be fixed in SaaS as well. After fixing it for brXM, please create a separate issue to address the forward port with notes how to make the fix, unless trivial to forward port, then it can be fixed directly.

      Attachments

        Issue Links

          Activity

            People

              Unassigned Unassigned
              mmilicevic Marijan Milicevic
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: