Bug overview description.
Trying to upload any filetype simply renaming to .webm allows it to be uploaded.
Been looking at posts which have comments about video being corrupted, just to find out they aren't webm files which is the cause for the video to not playback for those users.
What part(s) of the site page(s) are affected?
Uploading and video posts.
What is the expected behavior?
Site to either rename the file back to what it was, similar to what is being done with image files or alternatively prevent the upload from happening as user is trying to upload not supported filetype.
What actual behavior is given instead?
File is uploaded.
Can you reproduce the bug every time?
Yes.
What steps did you take to replicate this bug?
Take .mp4, .avi, .mkv, etc. file and rename (only rename, not convert) to .webm and upload to site.
Errors or other messages returned (if any).
Depends on situation.
If the file isn't video, it will show up as corrupted and will get flagged and removed. But if it's other video format, with all cases the post will show up as corrupted under some OS and browser combinations as they either do not have codecs to playback the file or can't determine what the file really is.
- - - - - - - - - - - - -
Alternatively, as mp4 is also HTML5 compatible video format, that could be simply allowed, however even in that case, some level of check that it's actually mp4 should be in place.
Updated by KiraNoot