blindxfish/devplacepy
1
0
Fork 0
forked from retoor/devplacepy
Code Pull Requests Activity

feat: remove .html and .svg from allowed upload types and MIME mappings

Browse Source 
Remove HTML and SVG file extensions from the ALLOWED_UPLOAD_TYPES dictionary and their corresponding MIME type entries from MIME_TO_EXT in attachments.py, preventing users from uploading these potentially unsafe file formats through the API.
This commit is contained in:
retoor
2026-06-16 06:50:16 +00:00
parent 99ed5c4f15
commit a618a95671
7 changed files with 86 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/e2e/feed.py
+1 -1
View File
@@ -592,7 +592,7 @@ def test_feed_resources_docs_link(alice):
docs = _resources_panel(page).locator("a.sidebar-link:has-text('Docs')")
assert docs.get_attribute("href") == "/docs"
docs.click()
page.wait_for_url(f"{BASE_URL}/docs", wait_until="domcontentloaded")
page.wait_for_url("**/docs/index.html", wait_until="domcontentloaded")
def test_feed_resources_issues_link(alice):