This issue has been created
 
 
XWiki Commons / cid:jira-generated-image-avatar-911b02c8-fde1-48ba-91e5-88cf3c7ee450 XCOMMONS-3516 Open

HTML5 File Upload: fileFilter Does Not Enforce MIME Type Restrictions

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-e43f5da8-fba7-4efe-ab24-a1342f9dc788 Rares-Emil Bancescu created this issue on 16/Dec/25 16:13
 
Summary: HTML5 File Upload: fileFilter Does Not Enforce MIME Type Restrictions
Issue Type: cid:jira-generated-image-avatar-911b02c8-fde1-48ba-91e5-88cf3c7ee450 Bug
Assignee: Unassigned
Created: 16/Dec/25 16:13
Priority: cid:jira-generated-image-static-major-c31bd598-ddec-46e8-9f1e-7bfe55a12da5 Major
Reporter: Rares-Emil Bancescu
Description:

The uploader behaves identically with or without the fileFilter parameter configured. Setting fileFilter does not restrict the accepted file types, and all files can still be uploaded regardless of the filter value.

For example, configuring fileFilter with a value such as /image\/.*/ does not change the upload behavior, you can still upload all types of files.