1# Allowed uploadable file extensions and mimetypes are defined here. 2# To extend this file it is recommended to create a mime.local.conf 3# file. Mimetypes that should be downloadable and not be opened in the 4# should be prefixed with a ! 5 6jpg image/jpeg 7jpeg image/jpeg 8gif image/gif 9png image/png 10ico image/vnd.microsoft.icon 11 12mp3 audio/mpeg 13ogg audio/ogg 14wav audio/wav 15webm video/webm 16ogv video/ogg 17mp4 video/mp4 18 19tgz !application/octet-stream 20tar !application/x-gtar 21gz !application/octet-stream 22bz2 !application/octet-stream 23zip !application/zip 24rar !application/rar 257z !application/x-7z-compressed 26 27pdf application/pdf 28ps !application/postscript 29 30rpm !application/octet-stream 31deb !application/octet-stream 32 33doc !application/msword 34xls !application/msexcel 35ppt !application/mspowerpoint 36rtf !application/msword 37 38docx !application/vnd.openxmlformats-officedocument.wordprocessingml.document 39xlsx !application/vnd.openxmlformats-officedocument.spreadsheetml.sheet 40pptx !application/vnd.openxmlformats-officedocument.presentationml.presentation 41 42sxw !application/soffice 43sxc !application/soffice 44sxi !application/soffice 45sxd !application/soffice 46 47odc !application/vnd.oasis.opendocument.chart 48odf !application/vnd.oasis.opendocument.formula 49odg !application/vnd.oasis.opendocument.graphics 50odi !application/vnd.oasis.opendocument.image 51odp !application/vnd.oasis.opendocument.presentation 52ods !application/vnd.oasis.opendocument.spreadsheet 53odt !application/vnd.oasis.opendocument.text 54 55# You should enable HTML and Text uploads only for restricted Wikis. 56# Spammers are known to upload spam pages through unprotected Wikis. 57# Note: Enabling HTML opens Cross Site Scripting vulnerabilities 58# through JavaScript. Only enable this with trusted users. You 59# need to disable the iexssprotect option additionally to 60# adding the mime type here 61#html text/html 62#htm text/html 63#txt text/plain 64#conf text/plain 65#xml text/xml 66#csv text/csv 67 68# Also flash may be able to execute arbitrary scripts in the website's 69# context 70#swf application/x-shockwave-flash 71 72