1# Allowed uploadable file extensions and mimetypes are defined here. 2# To extend this file it is recommended to create a mime.local.conf 3# file. Mimetypes that should be downloadable and not be opened in the 4# should be prefixed with a ! 5 6jpg image/jpeg 7jpeg image/jpeg 8gif image/gif 9png image/png 10ico image/vnd.microsoft.icon 11 12mp3 audio/mpeg 13ogg audio/ogg 14wav audio/wav 15webm video/webm 16ogv video/ogg 17mp4 video/mp4 18vtt text/vtt 19 20tgz !application/octet-stream 21tar !application/x-gtar 22gz !application/octet-stream 23bz2 !application/octet-stream 24zip !application/zip 25rar !application/rar 267z !application/x-7z-compressed 27 28pdf application/pdf 29ps !application/postscript 30 31rpm !application/octet-stream 32deb !application/octet-stream 33 34doc !application/msword 35xls !application/msexcel 36ppt !application/mspowerpoint 37rtf !application/msword 38 39docx !application/vnd.openxmlformats-officedocument.wordprocessingml.document 40xlsx !application/vnd.openxmlformats-officedocument.spreadsheetml.sheet 41pptx !application/vnd.openxmlformats-officedocument.presentationml.presentation 42 43sxw !application/soffice 44sxc !application/soffice 45sxi !application/soffice 46sxd !application/soffice 47 48odc !application/vnd.oasis.opendocument.chart 49odf !application/vnd.oasis.opendocument.formula 50odg !application/vnd.oasis.opendocument.graphics 51odi !application/vnd.oasis.opendocument.image 52odp !application/vnd.oasis.opendocument.presentation 53ods !application/vnd.oasis.opendocument.spreadsheet 54odt !application/vnd.oasis.opendocument.text 55 56# You should enable HTML and Text uploads only for restricted Wikis. 57# Spammers are known to upload spam pages through unprotected Wikis. 58# Note: Enabling HTML opens Cross Site Scripting vulnerabilities 59# through JavaScript. Only enable this with trusted users. You 60# need to disable the iexssprotect option additionally to 61# adding the mime type here 62#html text/html 63#htm text/html 64#txt text/plain 65#conf text/plain 66#xml text/xml 67#csv text/csv 68 69# Also flash may be able to execute arbitrary scripts in the website's 70# context 71#swf application/x-shockwave-flash 72 73