mirrors/snac2
3
0
Fork 0
mirror of https://codeberg.org/grunfink/snac2.git synced 2024-09-19 18:00:23 +03:00
Code Issues Packages Projects Releases Wiki Activity

Discard avatar uploads that are not images.

Browse Source
This commit is contained in:
default 2023-08-14 15:12:09 +02:00
parent 2696f62dc5
commit 16c14060a8
1 changed files with 15 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
html.c
View File

@ -2415,20 +2415,24 @@ int html_post_handler(const xs_dict *req, const char *q_path,
/* avatar upload */
xs_list *avatar_file = xs_dict_get(p_vars, "avatar_file");
if (!xs_is_null(avatar_file) && xs_type(avatar_file) == XSTYPE_LIST) {
char *fn = xs_list_get(avatar_file, 0);
if (xs_type(avatar_file) == XSTYPE_LIST) {
const char *fn = xs_list_get(avatar_file, 0);
if (*fn != '\0') {
char *ext = strrchr(fn, '.');
xs *id = xs_fmt("avatar%s", ext);
xs *url = xs_fmt("%s/s/%s", snac.actor, id);
int fo = xs_number_get(xs_list_get(avatar_file, 1));
int fs = xs_number_get(xs_list_get(avatar_file, 2));
if (fn && *fn) {
const char *mimetype = xs_mime_by_ext(fn);
/* store */
static_put(&snac, id, payload + fo, fs);
if (xs_startswith(mimetype, "image/")) {
const char *ext = strrchr(fn, '.');
xs *id = xs_fmt("avatar%s", ext);
xs *url = xs_fmt("%s/s/%s", snac.actor, id);
int fo = xs_number_get(xs_list_get(avatar_file, 1));
int fs = xs_number_get(xs_list_get(avatar_file, 2));
snac.config = xs_dict_set(snac.config, "avatar", url);
/* store */
static_put(&snac, id, payload + fo, fs);
snac.config = xs_dict_set(snac.config, "avatar", url);
}
}
}