Open main menu


This page is a translated version of the page Manual:$wgMimeTypeBlacklist and the translation is 6% complete.

Other languages:
English • ‎español • ‎français • ‎magyar • ‎polski • ‎日本語
Types MIME: $wgMimeTypeBlacklist
MIME types to disallow if $wgVerifyMimeType is enabled.
Introduit dans la version :1.5.0
Retiré dans la version :Encore utilisé
Valeurs autorisées :(array of MIME types (strings))
Valeur par défaut :(see below)


Files with these MIME types will never be allowed as uploads if $wgVerifyMimeType is enabled.

Default value

Version de MediaWiki : 1.18

Default value since 1.18:

$wgMimeTypeBlacklist = array(
        # HTML may contain cookie-stealing JavaScript and web bugs
        'text/html', 'text/javascript', 'text/x-javascript', 'application/x-shellscript',
        # PHP scripts may execute arbitrary code on the server
        'application/x-php', 'text/x-php',
        # Other types that may be interpreted by some servers
        'text/x-python', 'text/x-perl', 'text/x-bash', 'text/x-sh', 'text/x-csh',
        # Client-side hazards on Internet Explorer
        'text/scriptlet', 'application/x-msdownload',
        # Windows metafile, client-side vulnerability on some systems
  • 'application/x-opc+zip', 'application/msword', 'application/', 'application/vnd.msexcel' were blacklisted after 1.17.0 (r81376), and removed in r82783
  • 'application/x-opc+zip', 'text/scriptlet', 'application/x-msdownload' were introduced after 1.5.5
  • 'application/x-msmetafile' was added in 1.5.5
  • 'application/zip' was added in 1.14 and then removed in 1.18
  • All other values were available since the setting was introduced in 1.5.0