Anonymous users can modify the set of allowed file types

Access to the file type selection page is open to all. Patch to restrict to users with the "administer mandrill" permission follows.

from Google Alert - anonymous http://ift.tt/1O2kSwd
via IFTTT