From 51e47319ef2ab37d458dc96ba33a26bb851102be Mon Sep 17 00:00:00 2001 From: Thomas Tanghus Date: Mon, 14 Apr 2014 17:17:50 +0200 Subject: White-list known secure mime types. Refs. #8184 --- lib/private/helper.php | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'lib/private/helper.php') diff --git a/lib/private/helper.php b/lib/private/helper.php index da3d3cd1c6e..d5214823de9 100644 --- a/lib/private/helper.php +++ b/lib/private/helper.php @@ -430,6 +430,16 @@ class OC_Helper { return self::getMimetypeDetector()->detect($path); } + /** + * Get a secure mimetype that won't expose potential XSS. + * + * @param string $mimeType + * @return string + */ + static function getSecureMimeType($mimeType) { + return self::getMimetypeDetector()->getSecureMimeType($mimeType); + } + /** * get the mimetype form a data string * -- cgit v1.2.3