Bladeren bron

Update uploadController.js

* fixed blacklist from being bypassed due to case insensitive extension names
EpikPhailure 7 jaren geleden
bovenliggende
commit
daf8f0130c
1 gewijzigde bestanden met toevoegingen van 1 en 1 verwijderingen
  1. 1 1
      controllers/uploadController.js

+ 1 - 1
controllers/uploadController.js

@@ -23,7 +23,7 @@ const upload = multer({
 	limits: { fileSize: config.uploads.maxSize },
 	fileFilter: function(req, file, cb) {
 		if (config.blockedExtensions !== undefined) {
-			if (config.blockedExtensions.some(extension => path.extname(file.originalname) === extension)) {
+			if (config.blockedExtensions.some(extension => path.extname(file.originalname).toLowerCase() === extension)) {
 				return cb('This file extension is not allowed');
 			}
 			return cb(null, true);