Page MenuHomePhabricator
Create Task
Maniphest T7129

Can't drag-and-drop compressed file from windows explorer
Closed, DuplicatePublic
Actions

Description

I searched to see if this had been reported elsewhere. Apologies if this is a duplicate.

I can drag and drop image files from 7Zip or decompressed to the "Drag and drop images here to add them to the mock" box in Pholio or comments box elsewhere. I can not do so from the "Compressed Folder Tools" tab of windows explorer.

Steps to reproduce:

  1. Make a folder of zipped images.
  2. Right click this folder and open with Windows explorer.
  3. Attempt to drag an image (I used JPEG) to a comment box, description box, or image box.
  4. No error message is displayed and the image is not added.

Using 7Zip:

  1. Make a folder of zipped images.
  2. Right click this folder and open with 7Zip.
  3. Successfully drag images.

Tried with Firefox, IE, Chrome.

Although not all applications allow for compressed files to be dragged and dropped, it would be nice if it at least resulted in an error message one way or the other.

Thanks.

Related Objects

Event Timeline

mynamewastolen created this task.Feb 3 2015, 8:08 PM
mynamewastolen raised the priority of this task from to Needs Triage.
mynamewastolen updated the task description. (Show Details)
mynamewastolen added a subscriber: mynamewastolen.
epriestley added a subscriber: epriestley.Feb 3 2015, 8:16 PM

Are there other websites with drag-and-drop upload which exhibit better behavior in this case (either working, or giving you a better error message)?

This is probably something that browsers just don't support, but if it works on another site we could look at their implementation, and if something else can detect it we know it's detectable.

chad added projects: PHUI, Javelin.Feb 3 2015, 8:19 PM
mynamewastolen added a comment.Feb 4 2015, 4:36 PM

Not sure if it is the order in which Windows Explorer extracts files vrs. 7Zip, lack of browser support, or intentional design.

Here's the following behavior on several websites:

Gmail: issues an error with 7Zip, but not with Windows Explorer. It knows 7Zip is an image (per error pop up), looking at the requests it appears to be blocked as XSS.

Facebook: issues no error for either but locations that can receive drops detect both as a photo (rather than a link). It blocks it as CORS

Skype: Does nothing about Windows Explorer, but allows 7Zip after issuing an error (usefully "Unspecified").

From the perspective of being able to drag and drop, Phabricator does appear superior. Still if Facebook/Gmail block 7Zip for XSS and CORS it might be that there is actually a security reason for doing so?

Sorry to rephrase the issue as a question, but might be worth investigating. I'll see if I can dig up some reliable info.

Might be a feature request to allow or deny drag and drop of compressed files, if it is a security concern.

epriestley added a comment.Feb 4 2015, 4:41 PM

It's not a security concern -- the only reason that we intentionally reject files is if they larger than the configured limits.

I'll take a look at this at some point and figure out what we're seeing on our end and if we can (a) tell that this is what's happening and (b) do something about it, but given that mishandling of this case seems widespread I wouldn't get your hopes up about us being able to get it working. :)

mynamewastolen added a comment.Feb 4 2015, 5:23 PM

Cool. Thanks. Yeah, it is a minor thing for lazy, lazy users :)

epriestley closed this task as a duplicate of T7186: Improve behavior when users drag-and-drop upload something that isn't a file.Mar 2 2015, 4:29 PM
epriestley mentioned this in T7186: Improve behavior when users drag-and-drop upload something that isn't a file.
Phabricator · Built by Phacility