Feature #1791
closedForms: buttons instead of white-space string inputs
Description
At e.g. admin/file "Allowed file extensions" or admin/email "Recipients feedback" white-space separated strings are used which can be error prone. Much nicer would be a functionality to enter separate items like e.g. at alias.
Updated by Andreas Olschnögger almost 2 years ago
- Target version changed from 7.10.0 to 7.12.0
Updated by Andreas Olschnögger almost 2 years ago
- Status changed from Assigned to In Progress
- Assignee changed from Andreas Olschnögger to Moritz Großfurtner
In our frontend session today we've implemented this feature for the "Recipients feedback". Moritz will adapt this also for "Allowed file extensions" in admin/file.
Updated by Moritz Großfurtner almost 2 years ago
Do we want a validation for what file extensions are possible to allow? Probably not, as it is possible that users will have default file extensions that we do not know about right?
Updated by Bernhard Koschiček-Krombholz almost 2 years ago
We don't want to validate this. People who can change these extensions should know what they are doing.
Updated by Alexander Watzinger almost 2 years ago
As you already assumed, it isn't possible to know what file extensions they may have in use so a whitelist approach wouldn't work.
A typical blacklist approach would most likely include extensions like ".exe" to protect Windows users from viruses.
But in this case even that may be part of their workflow so it's their own choice and their own responsibility.
Only managers can change this anyway and only registered users can upload and, like Bernhard wrote, they should know what they are doing.
Updated by Alexander Watzinger over 1 year ago
- Status changed from In Progress to Closed