- Issue created by @poker10
This is a follow-up to: 📌 [D7] Add phtml files to the list of potentially malicious extensions Fixed
D7 does not have a complete test of FILE_INSECURE_EXTENSIONS
. Only selected use-cases (extensions) are tested in various functions, but not all of them. For example the asp
extension is not tested anywhere.
D10 has such test in SecurityFileUploadEventSubscriberTest::testSanitizeName()
.
We need to create such a test for D7, to have these insecure extensions tested properly (ideally to test uploading files with these extensions and also file names munging, but let's see).
Add a tests for uploading files with insecure extensions and also file names munging (of such files).