Manual:$wgTrustedMediaFormats

Images: $wgTrustedMediaFormats
List of trusted media-types and MIME types.
Introduced in version:	1.5.0
Removed in version:	still in use
Allowed values:	Unspecified
Default value:	(see below)
Other settings: Alphabetical | By function

Details

List of trusted media-types and MIME types. MIME types are maintained by the IANA (Internet Assigned Numbers Authority). You may wish to consult a list of common MIME types and their associated file extensions before trying to determine what to add to $wgTrustedMediaFormats. Use the MEDIATYPE_xxx constants to represent media types.

Files that do not match an entry on this list will have the content of the system message MediaWiki:Mediawarning displayed on the image description page. The default message is:

Warning: This file type may contain malicious code.
By executing it, your system may be compromised.

Default values

MediaWiki version:

≥ 1.10

$wgTrustedMediaFormats = [
	MEDIATYPE_BITMAP, // all bitmap formats
	MEDIATYPE_AUDIO, // all audio formats
	MEDIATYPE_VIDEO, // all plain video formats
	"image/svg+xml", // svg (only needed if inline rendering of svg is not supported)
	"application/pdf", // PDF files
	# "application/x-shockwave-flash", //flash/shockwave movie
];

MediaWiki versions:

1.5 – 1.9

$wgTrustedMediaFormats= array(
	MEDIATYPE_BITMAP, //all bitmap formats
	MEDIATYPE_AUDIO,  //all audio formats
	MEDIATYPE_VIDEO,  //all plain video formats
	"image/svg",  //svg (only needed if inline rendering of svg is not supported)
	"application/pdf",  //PDF files
	#"application/x-shockwave-flash", //flash/shockwave movie
);