Add the ability to hush specific fields for "Unsafe file extensions allowed in uploads" check

Created on 31 January 2023, almost 2 years ago
Updated 28 June 2024, 6 months ago

Problem/Motivation

3. Unsafe file extensions allowed in uploads. On several of our sites we allow (trusted) administrators to upload .html files. We provide this file type as an accessible alternative to a PDF. These specific files won't contain any dangerous HTML code, so we would like to ignore this particular field (it's a file upload field on a "HTML" media entity), but continue to check all other places where file uploads are permitted.

> For item 3 specifically, that feels like it should be an improvement to that upload test to confirm what permissions are required (if that's possible) so it doesn't even need a hush for that scenario.

Proposed resolution

* allow a field specific hush
* check permissions on the entity for access to the field that allows unsafe extensions

Remaining tasks

TBD

User interface changes

TBD

API changes

TBD

Data model changes

TBD

✨ Feature request
Status

Fixed

Version

3.0

Component

Code

Created by

πŸ‡ΊπŸ‡ΈUnited States jenlampton

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Merge Requests

Comments & Activities

Production build 0.71.5 2024