image以外はproxyしないように (#5051)

2019-06-14 12:14:23 +09:00 · 2019-06-14 12:14:23 +09:00 · 67dda01fcb
commit 67dda01fcb
parent e9dc54c4d9
1 changed files with 2 additions and 0 deletions
--- a/src/server/proxy/proxy-media.ts
+++ b/src/server/proxy/proxy-media.ts
@ -17,6 +17,8 @@ export async function proxyMedia(ctx: Koa.BaseContext) {

 		const [type, ext] = await detectMine(path);

+		if (!type.startsWith('image/')) throw 403;
+
 		let image: IImage;

 		if ('static' in ctx.query && ['image/png', 'image/gif'].includes(type)) {