fix

d53795184c (r62707827)
2022-01-01 22:28:02 +09:00 · 2022-01-01 22:28:02 +09:00 · 158dd49b3d
commit 158dd49b3d
parent 57d994db0c
1 changed files with 1 additions and 0 deletions
--- a/packages/backend/src/server/proxy/proxy-media.ts
+++ b/packages/backend/src/server/proxy/proxy-media.ts
@ -19,6 +19,7 @@ export async function proxyMedia(ctx: Koa.Context) {

 		const { mime, ext } = await detectType(path);

+		if (!mime.startsWith('image/')) throw 403;
 		if (!FILE_TYPE_BROWSERSAFE.includes(mime)) throw 403;

 		let image: IImage;