adminbruno/docuseal
1
0 Fork 0
mirror of https://github.com/docusealco/docuseal synced 2026-11-04 06:42:32 -05:00
Code Issues Packages Projects Releases Wiki Activity

normalize extension

Browse Source
This commit is contained in:
Pete Matsyburka committed 2026-09-21 09:06:25 +03:00
1 parent 5741bb4db2
commit 24f195c7e5
7 files changed
+32 -29
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

app/controllers/api/active_storage_blobs_proxy_controller.rb
+1 -1
View File
@@ -23,7 +23,7 @@ module Api
blob = ActiveStorage::Blob.find_by!(uuid: blob_uuid)
if Submitters::DANGEROUS_EXTENSIONS.include?(blob.filename.extension.to_s.downcase)
if FilenameUtils.dangerous_extension(blob.filename)
Rollbar.error('Dangerous extension') if defined?(Rollbar)
return head :unprocessable_content