[boost] Re: Attachments stripping

From: David Abrahams (dave_at_[hidden])
Date: 2004-04-02 09:35:11

Vladimir Prus <ghost_at_[hidden]> writes:

> David Abrahams wrote:
>
>>> Unknown, since nobody spoke up since http://tinyurl.com/2mqkr. IMO we
>>> should just restore the status quo.
>> 
>> Problem is that it's unknown what the status quo was.  The current
>> status is that the following MIME types are let through:
>> 
>>   multipart/mixed
>>   multipart/alternative
>>   text/plain
>>   text/x-cplusplus
>>   text/x-c++src
>>   text/x-c++hdr
>>   text/x-csrc
>>   text/x-chdr
>>   text/html
>> 
>> but HTML will be converted to plaintext.
>
> My mailman installation says:
>
>     "Leave this field blank to skip this filter test."
>
> so maybe it should be really left blank? The set of reasonable extension is
> hard to guess in advance (at least .diff, .patch, .log, .out are possible,
> but who knows...)

I think the goal is to prevent viral intrusion and unreasonably large
downloads.  That said, we probably have enough safeguards in place
with the "first-post-moderated" policy and posting size limits that
you're probably right.  As long as HTML is still being converted to
plaintext, I don't forsee any problems.

Objections to clearing the MIME type filter field, anyone?

-- 
Dave Abrahams
Boost Consulting
www.boost-consulting.com