Sometimes when you are uploading a file it may contain HTML code in the first kilobytes of its data. CKFinder will upload the file with the HTML code only when the file extension is added to the following configuration setting: {{{code}}}
If you, for example, want to upload an .xsl
file that contains HTML code at the beginning of the file, you should add this file extension to the list.
{{{code2}}}
This setting secures your server against the the Universal XSS / MIME Type detection attack.