github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2025-03-21 05:34:24 +00:00
Code Issues Projects Releases Packages Wiki Activity

MediaService: Only allow upload of common image formats and PDFs

Browse source 
Signed-off-by: David Mehren <git@herrmehren.de>
This commit is contained in:
David Mehren 2020-10-17 20:50:20 +02:00
parent ed142815e3
commit ffef4425f5
No known key found for this signature in database
GPG key ID: 185982BA4C42B7C3
1 changed files with 16 additions and 2 deletions

18
src/media/media.service.ts
View file

@ -26,8 +26,22 @@ export class MediaService {
}
private static isAllowedMimeType(mimeType: string): boolean {
//TODO: Which mimetypes are allowed?
return true;
const allowedTypes = [
'application/pdf',
'image/apng',
'image/bmp',
'image/gif',
'image/heif',
'image/heic',
'image/heif-sequence',
'image/heic-sequence',
'image/jpeg',
'image/png',
'image/svg+xml',
'image/tiff',
'image/webp',
];
return allowedTypes.includes(mimeType);
}
public async saveFile(file: MulterFile, username: string, noteId: string) {