On Mon, 2011-12-12 at 15:21 -0500, Stephen Gallagher wrote: > On Mon, 2011-12-12 at 13:16 -0700, Ken Dreyer wrote: > > On Mon, Dec 12, 2011 at 12:24 PM, Stephen Gallagher <sgallagh@xxxxxxxxxx> wrote: > > > * #715 Provenpackager education/status/brainstorming (sgallagh, > > > 18:43:02) > > > > There was some discussion a while back about preventing certain > > extensions from being uploaded to the lookaside cache. Could ".patch" > > be added to that list? > > > Not a terrible idea. ".diff" should also be a candidate if we go that > route. > > > Of course, a whitelist might be a better idea. Maybe we only > allow .tar.gz, .tar.bz2 and .zip to be uploaded this way and make > additional exceptions as they arise. What about running a 'file' command on the stuff and if the output contains 'text' then allow upload only with some kind of --force option? -- Tomas Mraz No matter how far down the wrong road you've gone, turn back. Turkish proverb -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/devel