From 1fee81acefd26cad95bfbef728a79e04fe46b2ad Mon Sep 17 00:00:00 2001 From: Cam Findlay Date: Wed, 25 Jun 2014 14:55:29 +1200 Subject: [PATCH] DOCS Document that you can set the global allow extensions via YAML. Fixes #3233 --- docs/en/reference/uploadfield.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/docs/en/reference/uploadfield.md b/docs/en/reference/uploadfield.md index 429cf347c..204086d56 100644 --- a/docs/en/reference/uploadfield.md +++ b/docs/en/reference/uploadfield.md @@ -146,6 +146,14 @@ to known file categories. // 'doc','docx','txt','rtf','xls','xlsx','pages', 'ppt','pptx','pps','csv','pdf' $uploadField->setAllowedFileCategories('image', 'doc'); +`AllowedExtensions` can also be set globally via the [YAML configuration](/topics/configuration#setting-configuration-via-yaml-files), for example you may add the following into your mysite/_config/config.yml: + + :::yaml + File: + allowed_extensions: + - 7zip + - xzip +
Note: File types such as SWF, XML and HTML are excluded by default from uploading as these types are common security attack risks. If necessary, these types may be allowed as uploads (at your own risk) by adding each