Whitelist .ics files for forum/library?
I just tried to include some .ics file attachments to a forum post to distribute meeting calendar items to the Commons team, and after I pressed submit I was told that they were disallowed for security reasons. I then tried to post them to the Library instead but it wouldn't allow me to select that type of file on my computer.
Is there a specific security risk for uploaded .ics files? If so I'm happy to work around this, but I wasn't sure if they were just part of a blanket blocking and we'd never examined them specifically.
#1 Updated by Raymond Hoh 9 months ago
- Category name changed from Group Files to WordPress - Media
- Status changed from New to Assigned
- Assignee changed from Boone Gorges to Raymond Hoh
- Target version set to 1.18.18
Only certain file types are allowed to be uploaded to WordPress by default. .ics files are not part of this internal allowed list, so I've manually added support for it in https://github.com/cuny-academic-commons/cac/commit/8298f02cabd6ad7c7f22dd897d885276129b84ef.
I haven't pushed this as a hotfix to production yet, but I can if you need to attach the .ics files before your next forum post.