/usr/share/doc/mhonarc/resources/mimeincs.html is in mhonarc 2.6.18-3.
This file is owned by root:root, with mode 0o644.
The actual contents of the file can be viewed below.
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162 163 164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 181 182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 203 204 205 206 207 208 209 210 211 212 213 214 215 216 217 218 219 220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235 236 | <html>
<head>
<title>MHonArc Resources: MIMEINCS</title>
<link rel="stylesheet" type="text/css" href="../docstyles.css">
</head>
<body>
<!--x-rc-nav-->
<table border=0><tr valign="top">
<td align="left" width="50%">[Prev: <a href="mimefilters.html">MIMEFILTERS</a>]</td><td><nobr>[<a href="../resources.html#mimeincs">Resources</a>][<a href="../mhonarc.html">TOC</a>]</nobr></td><td align="right" width="50%">[Next: <a href="modifybodyaddresses.html">MODIFYBODYADDRESSES</a>]</td></tr></table>
<!--/x-rc-nav-->
<hr>
<h1>MIMEINCS</h1>
<!--X-TOC-Start-->
<ul>
<li><a href="#syntax">Syntax</a>
<li><a href="#description">Description</a>
<li><a href="#default">Default Setting</a>
<li><a href="#rcvars">Resource Variables</a>
<li><a href="#examples">Examples</a>
<ul>
<li><small><a href="#incmsg">Supporting Message-based Attachments</a></small>
</ul>
<li><a href="#version">Version</a>
<li><a href="#seealso">See Also</a>
</ul>
<!--X-TOC-End-->
<!-- *************************************************************** -->
<hr>
<h2><a name="syntax">Syntax</a></h2>
<dl>
<dt><strong>Envariable</strong></dt>
<dd><p>
N/A
</p>
</dd>
<dt><strong>Element</strong></dt>
<dd><p>
<code><MIMEINCS></code><br>
<var>content-type</var><br>
<var>content-type</var><br>
...<br>
<code></MIMEINCS></code><br>
</p>
</dd>
<dt><strong>Command-line Option</strong></dt>
<dd><p>
N/A
</p>
</dd>
</dl>
<!-- *************************************************************** -->
<hr>
<h2><a name="description">Description</a></h2>
<p>MIMEINCS defines the list of content-types (aka media-types) to allow.
If the MIMEINCS resource is not empty, only media-types listed will
be allowed. All other media-types will be excluded.
</p>
<p>For example, if MIMEINCS is set to the following:
</p>
<pre class="code">
<b><MIMEIncs></b>
text/plain
text/html
<b></MIMEIncs></b>
</pre>
<p>Then only text/plain and text/html media-types are allowed. All
other media-types will be excluded.
</p>
<table class="note" width="100%">
<tr valign="baseline">
<td><strong>NOTE:</strong></td>
<td width="100%"><p>If a media-type is listed in the
<a href="mimeexcs.html">MIMEEXCS</a>, it is always excluded, regardless
of the value of MIMEINCS.
</p>
</td>
</tr>
</table>
<p>If all you want to do is exclude a specified set of media-types, then
use the
<a href="mimeexcs.html">MIMEEXCS</a> resource instead.
</p>
<p>Base types can also be listed to allow all media-types
with a give base. For example, <tt>image/jpg</tt> will only allow
JPEG images, but <tt>image</tt> will allow all images.
</p>
<table class="note" width="100%">
<tr valign="baseline">
<td><strong>NOTE:</strong></td>
<td width="100%"><p>Use care when setting MIMEINCS since you may
unintentionally exclude media-types that you do not want to exclude.
See <a href="#incmsg">Examples</a> below.
</p>
</td>
</tr>
</table>
<p>
</p>
<!-- *************************************************************** -->
<hr>
<h2><a name="default">Default Setting</a></h2>
<p>Nil.
</p>
<!-- *************************************************************** -->
<hr>
<h2><a name="rcvars">Resource Variables</a></h2>
<p>N/A
</p>
<!-- *************************************************************** -->
<hr>
<h2><a name="examples">Examples</a></h2>
<p>MIMEINCS provides strict control over the allowed media-types
in your archives, allowing for better security. For example:
</p>
<pre class="code">
<b><MIMEIncs></b>
text/plain
<b></MIMEIncs></b>
</pre>
<p>Will only allow text/plain data. All other types will be
excluded. For some, this may be ideal, but for many, it may
be too restrictive: disallowing other text media types
that do not pose security risks. Therefore, the following
may be prefered:
</p>
<pre class="code">
<b><MIMEIncs></b>
text
<b></MIMEIncs></b>
</pre>
<p>All text media-types are allowed. However, HTML (text/html) does
pose <a href="../faq/security.html#htmldata">security problems</a>.
Therefore, you may want to allow all text media-types, excluding HTML:
</p>
<pre class="code">
<b><MIMEIncs></b>
text
<b></MIMEIncs></b>
<b><<a href="mimeexcs.html">MIMEExcs</a>></b>
text/html
<b></MIMEExcs></b>
</pre>
<h3><a name="incmsg">Supporting Message-based Attachments</a></h3>
<p>The media-type <tt>message/rfc822</tt> is commonly used when
one message includes another. For example, popular MUAs provide
a "forward-as-attachment" feature when reading an email message.
When used, MUAs will specify the <tt>message/rfc822</tt> media-type
for the attachment.
</p>
<p><a name="incmsg"></a>
The following is a more liberal MIMEINCS setting that allows
media-types commonly used in email, allows
forward-as-attachment cases, and keeps security risks to a minimum:
</p>
<pre class="code">
<b><MIMEIncs></b>
text
image
message
<b></MIMEIncs></b>
</pre>
<table class="note" width="100%">
<tr valign="baseline">
<td><strong>NOTE:</strong></td>
<td width="100%"><p>Attached messages will still be restricted to
the media-types listed in MIMEINCS. For example, if a forwarded
message includes a video attachment, the video attachment will
be excluded.
</p>
</td>
</tr>
</table>
<p> </p>
<!-- *************************************************************** -->
<hr>
<h2><a name="version">Version</a></h2>
<p>2.6.12
</p>
<!-- *************************************************************** -->
<hr>
<h2><a name="seealso">See Also</a></h2>
<p>
<a href="mimealtprefs.html">MIMEALTPREFS</a>,
<a href="mimeexcs.html">MIMEEXCS</a>,
<a href="mimefilters.html">MIMEFILTERS</a>
</p>
<!-- *************************************************************** -->
<hr>
<!--x-rc-nav-->
<table border=0><tr valign="top">
<td align="left" width="50%">[Prev: <a href="mimefilters.html">MIMEFILTERS</a>]</td><td><nobr>[<a href="../resources.html#mimeincs">Resources</a>][<a href="../mhonarc.html">TOC</a>]</nobr></td><td align="right" width="50%">[Next: <a href="modifybodyaddresses.html">MODIFYBODYADDRESSES</a>]</td></tr></table>
<!--/x-rc-nav-->
<hr>
<address>
$Date: 2005/07/23 06:23:56 $<br>
<img align="top" src="../monicon.png" alt="">
<a href="http://www.mhonarc.org/"><strong>MHonArc</strong></a><br>
Copyright © 2005, <a href="http://www.earlhood.com/"
>Earl Hood</a>, <a href="mailto:mhonarc%40mhonarc.org">mhonarc<!--
>-->@<!--
>-->mhonarc.org</a>
</address>
</body>
</html>
|