Merge branch 'notification-read-api' into swn

2022-01-01 23:04:36 +09:00 · 2022-01-01 23:04:36 +09:00 · 7f8e3b0dee
commit 7f8e3b0dee
parent a444e6adab a70d9d2034
60 changed files with 511 additions and 468 deletions
--- a/packages/backend/src/server/proxy/proxy-media.ts
+++ b/packages/backend/src/server/proxy/proxy-media.ts
@ -19,6 +19,7 @@ export async function proxyMedia(ctx: Koa.Context) {

 		const { mime, ext } = await detectType(path);

+		if (!mime.startsWith('image/')) throw 403;
 		if (!FILE_TYPE_BROWSERSAFE.includes(mime)) throw 403;

 		let image: IImage;