monkee.ch/snac2
1
0
Fork 0
mirror of https://codeberg.org/grunfink/snac2.git synced 2024-11-22 13:25:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

Discard avatar uploads that are not images.

Browse source
This commit is contained in:
default 2023-08-14 15:12:09 +02:00
parent 2696f62dc5
commit 16c14060a8
1 changed files with 15 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
html.c
View file

@ -2415,11 +2415,14 @@ int html_post_handler(const xs_dict *req, const char *q_path,
/* avatar upload */ /* avatar upload */
xs_list *avatar_file = xs_dict_get(p_vars, "avatar_file"); xs_list *avatar_file = xs_dict_get(p_vars, "avatar_file");
if (!xs_is_null(avatar_file) && xs_type(avatar_file) == XSTYPE_LIST) { if (xs_type(avatar_file) == XSTYPE_LIST) {
char *fn = xs_list_get(avatar_file, 0); const char *fn = xs_list_get(avatar_file, 0);
if (*fn != '\0') { if (fn && *fn) {
char *ext = strrchr(fn, '.'); const char *mimetype = xs_mime_by_ext(fn);
if (xs_startswith(mimetype, "image/")) {
const char *ext = strrchr(fn, '.');
xs *id = xs_fmt("avatar%s", ext); xs *id = xs_fmt("avatar%s", ext);
xs *url = xs_fmt("%s/s/%s", snac.actor, id); xs *url = xs_fmt("%s/s/%s", snac.actor, id);
int fo = xs_number_get(xs_list_get(avatar_file, 1)); int fo = xs_number_get(xs_list_get(avatar_file, 1));
@ -2431,6 +2434,7 @@ int html_post_handler(const xs_dict *req, const char *q_path,
snac.config = xs_dict_set(snac.config, "avatar", url); snac.config = xs_dict_set(snac.config, "avatar", url);
} }
} }
}
/* password change? */ /* password change? */
if ((p1 = xs_dict_get(p_vars, "passwd1")) != NULL && if ((p1 = xs_dict_get(p_vars, "passwd1")) != NULL &&