LobotomyLabs/classquiz-ai
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

🚑 Fixed critical bug in image-upload

Browse Source
This commit is contained in:
Mawoka
2022-09-25 09:58:59 +02:00
parent f82e61521e
commit 0de3a87406
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
classquiz/routers/editor.py
+2 -2
View File
@@ -28,7 +28,7 @@ settings = settings()
router = APIRouter() router = APIRouter()
allowed_image_extensions = [".gif", ".jpg", ".jpeg", ".png", ".svg", ".webp"] allowed_image_extensions = [".gif", ".jpg", ".jpeg", ".png", ".svg", ".webp", ".jfif"]
class InitEditorResponse(BaseModel): class InitEditorResponse(BaseModel):
@@ -101,7 +101,7 @@ async def upload_image(edit_id: str, pow_data: str, file: UploadFile = File()):
if uploaded_images != 0 and not check_hashcash(pow_data, pow_data_server, "8"): if uploaded_images != 0 and not check_hashcash(pow_data, pow_data_server, "8"):
raise HTTPException(status_code=401, detail="Edit ID not found!") raise HTTPException(status_code=401, detail="Edit ID not found!")
file_bytes = await file.read() file_bytes = await file.read()
if len(file_bytes) < 2000: if len(file_bytes) > 2000000:
raise HTTPException(status_code=400, detail="File too large") raise HTTPException(status_code=400, detail="File too large")
pm_data = puremagic.magic_string(file_bytes)[0] pm_data = puremagic.magic_string(file_bytes)[0]
if pm_data.extension not in allowed_image_extensions: if pm_data.extension not in allowed_image_extensions: