Feature #1791
closed
Forms: buttons instead of white-space string inputs
Added by Alexander Watzinger over 2 years ago.
Updated over 1 year ago.
Description
At e.g. admin/file "Allowed file extensions" or admin/email "Recipients feedback" white-space separated strings are used which can be error prone. Much nicer would be a functionality to enter separate items like e.g. at alias.
- Target version changed from 7.10.0 to 7.12.0
- Status changed from Assigned to In Progress
- Assignee changed from Andreas Olschnögger to Moritz Großfurtner
In our frontend session today we've implemented this feature for the "Recipients feedback". Moritz will adapt this also for "Allowed file extensions" in admin/file.
Do we want a validation for what file extensions are possible to allow? Probably not, as it is possible that users will have default file extensions that we do not know about right?
We don't want to validate this. People who can change these extensions should know what they are doing.
As you already assumed, it isn't possible to know what file extensions they may have in use so a whitelist approach wouldn't work.
A typical blacklist approach would most likely include extensions like ".exe" to protect Windows users from viruses.
But in this case even that may be part of their workflow so it's their own choice and their own responsibility.
Only managers can change this anyway and only registered users can upload and, like Bernhard wrote, they should know what they are doing.
- Status changed from In Progress to Closed
Also available in: Atom
PDF