Please add .UNF extension to the list of allowed files

Found an issue with the phpBB system here at NESdev? Use this forum to report problems.

Moderator: Moderators

User avatar
rainwarrior
Posts: 8731
Joined: Sun Jan 22, 2012 12:03 pm
Location: Canada
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by rainwarrior »

Request: Processing .pde files

They're a text format, basically just a java source code. Useful for writing visual examples, especially interactive ones.
User avatar
Memblers
Site Admin
Posts: 4044
Joined: Mon Sep 20, 2004 6:04 am
Location: Indianapolis
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by Memblers »

.pde extension was added
User avatar
krzysiobal
Posts: 1036
Joined: Sun Jun 12, 2011 12:06 pm
Location: Poland
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by krzysiobal »

Really, why annoying users and making them need of additioanl effort for double uploading some files (if first time it fails, then he needs to pack it as .zip/.rar)

AVI also is not alowed.
tepples
Posts: 22705
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by tepples »

A nontrivial AVI is probably too big in MB to attach anyway.
qalle
Posts: 50
Joined: Wed Aug 16, 2017 12:15 am

Re: Please add .UNF extension to the list of allowed files

Post by qalle »

Requests:
  • .bat (I use them with NES assemblers)
  • .java (I probably won't need them but there is one at http://nesdev.com/NESrev.java)
  • .xz (compressed file)
User avatar
Memblers
Site Admin
Posts: 4044
Joined: Mon Sep 20, 2004 6:04 am
Location: Indianapolis
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by Memblers »

.xz seems good, .bat and .java though both make me a little paranoid. If it's not a filetype I would feel safe opening myself from a random unknown source, I wouldn't want the forum to allow someone else to, also. Of course I'm not worried about stuff actual forum users would post, but anybody can easily make an account. Unfortunately, we don't have an easy way of stopping someone from posting attachments and spam URLs as soon as they sneak through the registration process, wouldn't be a concern otherwise.
User avatar
koitsu
Posts: 4201
Joined: Sun Sep 19, 2004 9:28 pm
Location: A world gone mad

Re: Please add .UNF extension to the list of allowed files

Post by koitsu »

People should be compressing stuff like that using .zip or some other format if possible.
tepples
Posts: 22705
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by tepples »

I'm getting the point: source code should be in a zipfile or something so that the user has to take a deliberate action to execute it even on an exploited browser, especially if it's in a scripting language like .bat. I may have made a mistake in the past by adding scripting language source code; that mistake may need to be reversed sometime.

I've added .xz.
User avatar
thefox
Posts: 3134
Joined: Mon Jan 03, 2005 10:36 am
Location: 🇫🇮
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by thefox »

Memblers wrote:.xz seems good, .bat and .java though both make me a little paranoid.
I agree about .bat, but .java is just Java source code. It won't run by default on any operating system (.js is a different deal).
Download STREEMERZ for NES from fauxgame.com! — Some other stuff I've done: fo.aspekt.fi
tepples
Posts: 22705
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by tepples »

My proposal: Remove .lua, .php, .py, .js, and .swf; add .java. Anyone second or object?
lidnariq
Posts: 11429
Joined: Sun Apr 13, 2008 11:12 am

Re: Please add .UNF extension to the list of allowed files

Post by lidnariq »

Could we change the "you can't upload that" message to instead say "put it in an archive and then upload that" ?
User avatar
Memblers
Site Admin
Posts: 4044
Joined: Mon Sep 20, 2004 6:04 am
Location: Indianapolis
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by Memblers »

tepples wrote:My proposal: Remove .lua, .php, .py, .js, and .swf; add .java. Anyone second or object?
I think .py and .lua are probably OK along the lines of .java, AFAIK they're not something one could just mindlessly click on and launch, right? I'm not a big user of any of those languages so it's a real question. At least not without purposefully installing some kind of support for those in your OS. We see those used enough around here that's it's probably not worth trading the convenience for the safety. Removing php, js and swf sounds reasonable to me, though.
tepples
Posts: 22705
Joined: Sun Sep 19, 2004 11:12 pm
Location: NE Indiana, USA (NTSC)
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by tepples »

Memblers wrote:
tepples wrote:My proposal: Remove .lua, .php, .py, .js, and .swf; add .java. Anyone second or object?
I think .py and .lua are probably OK along the lines of .java, AFAIK they're not something one could just mindlessly click on and launch, right?
The installer of Python for Windows associates the .py extension with itself.
Memblers wrote:At least not without purposefully installing some kind of support for those in your OS.
PHP and Python are roughly in the same boat here: the interpreter isn't installed by default on Windows. Python is more likely to be installed on FreeBSD and GNU/Linux, but those systems use the execute bit to decide when to treat something as a program. And anyone who has started with my NES and Super NES project templates has Python and Pillow installed alongside cc65.
User avatar
rainwarrior
Posts: 8731
Joined: Sun Jan 22, 2012 12:03 pm
Location: Canada
Contact:

Re: Please add .UNF extension to the list of allowed files

Post by rainwarrior »

I like both .py and .lua here very much, and would not want to see them removed. I also previously requested .pde which is tantamount to .java already.

I can understand trepidation about .bat, though I'd also say that they're not a particularly versatile script format, and rarely useful without accompanying files (thus already covered by zip/etc), so having loose .bat prevented doesn't seem like a big deal to me.

I don't really think .js or .php is a problem. I've definitely seen .bat as a vector for malware installation, because any Windows user can run it. The others require separate installs. I don't think there's any value in trying to prevent all executable code from being attached (quite the opposite), I thought the goal was just to stop up typical malware/spam points?

Same deal with .swf... but has someone actually wanted to attach an .swf here?
qalle
Posts: 50
Joined: Wed Aug 16, 2017 12:15 am

Re: Please add .UNF extension to the list of allowed files

Post by qalle »

I agree; .bat would be dangerous and quite useless. .swf seems unnecessary, too.

However, I think most source files (.py etc.) should be accepted. After all, they're not more dangerous than an .exe inside a .zip, which can be executed even on an out-of-the-box Windows.

More suggestions:
  • .bas (BASIC source; there might be some old utilities written in it, although I don't remember seeing any)
  • .svg (Scalable Vector Graphics; for posting e.g. sketches of game graphics/website logos)
  • .xhtml (some documents might be in that format, although again I don't remember seeing any)
Post Reply