-
Bug
-
Resolution: Fixed
-
Neutral
-
None
-
None
-
None
-
-
Empty show more show less
-
Yes
-
Yes
Steps to reproduce
- Go to Demo and open the Assets app
- Click on upload new asset and within the detail view, select the test.js file
- Upload it and check no security check is performed (asset uploaded)
- Now try the "Upload zip archive" with the test.js.zip file
- Check the security check prevents the user to upload the file
Expected results
Validator should detect correct mimeType for file. Javascript file could be uploaded if zipped or not.
Actual results
If not zipped, the file is uploaded
Workaround
N/A
Development notes
N/A
Acceptance criteria
- is cloned by
-
MGNLEE-829 Port to Master: Compromised JS files only checked if they are zipped
- Closed