FoF Upload user-provided extensions don't work

amp

Forum URL: ampmod.flarum.cloud

A clear description of the issue: i configured “apz”, “asz”, “sb3” and “sprite3” so that you can upload ampmod projects to the forums, but this isn’t working. another admin a while ago set it so any zip file (which all of these files are based off) can be uploaded but i feel that’s a security risk.

SKevo

amp your mimetype configuration is incorrect. Try application\/octet-stream instead of your current regular expression (^(a[sp]z|s(prite|b)3)$). See https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/MIME_types/Common_types for reference:

application/octet-stream is the default value for all other cases. An unknown file type should use this type. Browsers are particularly careful when manipulating these files to protect users from software vulnerabilities and possible dangerous behavior.

amp

SKevo i don’t want to open up generic mime types for security reasons

SKevo

amp as far as I know, there is no other mimetype for the type of files that you want to upload

amp

SKevo there is user-provided extension support though