Merge pull request #529 from creative-commoners/pulls/1.11/disallow-gpx

Don't allow uploading .gpx files
silverstripe · Nov 20, 2022 · 252179e · 252179e
2 parents 97afd88 + d132e9f
commit 252179e
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/File.php b/src/File.php
@@ -204,7 +204,7 @@ class File extends DataObject implements AssetContainer, Thumbnail, CMSPreviewab
      */
     private static $allowed_extensions = [
         '', 'ace', 'arc', 'arj', 'asf', 'au', 'avi', 'bmp', 'bz2', 'cab', 'cda', 'csv', 'dmg', 'doc',
-        'docx', 'dotx', 'flv', 'gif', 'gpx', 'gz', 'hqx', 'ico', 'jpeg', 'jpg', 'kml',
+        'docx', 'dotx', 'flv', 'gif', 'gz', 'hqx', 'ico', 'jpeg', 'jpg', 'kml',
         'm4a', 'm4v', 'mid', 'midi', 'mkv', 'mov', 'mp3', 'mp4', 'mpa', 'mpeg', 'mpg', 'ogg', 'ogv', 'pages',
         'pcx', 'pdf', 'png', 'pps', 'ppt', 'pptx', 'potx', 'ra', 'ram', 'rm', 'rtf', 'sit', 'sitx',
         'tar', 'tgz', 'tif', 'tiff', 'txt', 'wav', 'webm', 'webp', 'wma', 'wmv', 'xls', 'xlsx', 'xltx', 'zip',
@@ -225,7 +225,7 @@ class File extends DataObject implements AssetContainer, Thumbnail, CMSPreviewab
             'ram', 'rm', 'snd', 'wav', 'wma',
         ],
         'document' => [
-            'css', 'csv', 'doc', 'docx', 'dotm', 'dotx', 'htm', 'html', 'gpx', 'js', 'kml', 'pages', 'pdf',
+            'css', 'csv', 'doc', 'docx', 'dotm', 'dotx', 'htm', 'html', 'js', 'kml', 'pages', 'pdf',
             'potm', 'potx', 'pps', 'ppt', 'pptx', 'rtf', 'txt', 'xhtml', 'xls', 'xlsx', 'xltm', 'xltx', 'xml',
         ],
         'image' => [