fix

d53795184c (r62707827)
2024-11-25 10:19:06 +01:00 · 2022-01-01 22:28:02 +09:00 · 2022-01-01 22:28:02 +09:00 · 382d6a3dd9
commit 382d6a3dd9
parent 6bd6b72e1b
1 changed files with 1 additions and 0 deletions
--- a/packages/backend/src/server/proxy/proxy-media.ts
+++ b/packages/backend/src/server/proxy/proxy-media.ts
@ -19,6 +19,7 @@ export async function proxyMedia(ctx: Koa.Context) {

 		const { mime, ext } = await detectType(path);

+		if (!mime.startsWith('image/')) throw 403;
 		if (!FILE_TYPE_BROWSERSAFE.includes(mime)) throw 403;

 		let image: IImage;