Declaring HTML Extensions

This website contains links to software which is either no longer maintained or will be supported only until the end of 2019 (CKFinder 2). For the latest documentation about current CKSource projects, including software like CKEditor 4/CKEditor 5, CKFinder 3, Cloud Services, Letters, Accessibility Checker, please visit the new documentation website.

If you look for an information about very old versions of CKEditor, FCKeditor and CKFinder check also the CKEditor forum, which was closed in 2015. If not, please head to StackOverflow for support.

 
(2 intermediate revisions by 2 users not shown)
Line 1: Line 1:
Sometimes when you're uploading a file it may have an html code in the first KB of its data. The CKFinder will upload the file with the html code only when the file extension is written in the following section:   
+
{{#CUSTOMTITLE:Declaring HTML Extensions}}
 +
Sometimes when you are uploading a file it may contain HTML code in the first kilobytes of its data. CKFinder will upload the file with the HTML code only when the file extension is added to the following configuration setting:   
 
{{{code}}}
 
{{{code}}}
So for example: if you want to upload a .xsl file which has a html code in the beginning, you should add its the extension to the list.
+
 
 +
If you, for example, want to upload an <code>.xsl</code> file that contains HTML code at the beginning of the file, you should add this file extension to the list.
 
{{{code2}}}
 
{{{code2}}}
This function secures your server from the attack of the Universal XSS / MIME Type detection. <br>
+
 
 +
 
 +
Please note that this feature performs only a very basic set of checks to detect HTML-like data in the first 1kB of the file contents to protect users e.g. against unintentional uploading of files with HTML content and with a wrong extension. <br>

Latest revision as of 11:39, 21 August 2019

Sometimes when you are uploading a file it may contain HTML code in the first kilobytes of its data. CKFinder will upload the file with the HTML code only when the file extension is added to the following configuration setting:  {{{code}}}

If you, for example, want to upload an .xsl file that contains HTML code at the beginning of the file, you should add this file extension to the list. {{{code2}}}


Please note that this feature performs only a very basic set of checks to detect HTML-like data in the first 1kB of the file contents to protect users e.g. against unintentional uploading of files with HTML content and with a wrong extension.

This page was last edited on 21 August 2019, at 11:39.