add force_upload to mimetype detection back again

This commit is contained in:
Simon Rieger 2024-09-02 15:14:52 +02:00
parent 041922ea6d
commit 6624c5a989

View file

@ -144,11 +144,14 @@ func uploadHandler(w http.ResponseWriter, r *http.Request) {
return return
} }
mimeType := http.DetectContentType(buffer) forceUpload := r.FormValue("force_upload")
if !strings.HasPrefix(mimeType, "image/") && !strings.HasPrefix(mimeType, "text/xml") && !strings.HasPrefix(mimeType, "image/svg+xml") { if forceUpload != "true" {
http.Error(w, "Nur Bild-Uploads sind erlaubt", http.StatusBadRequest) mimeType := http.DetectContentType(buffer)
log.Printf("Versuch, eine Nicht-Bild-Datei hochzuladen: %v", mimeType) if !strings.HasPrefix(mimeType, "image/") && !strings.HasPrefix(mimeType, "text/xml") && !strings.HasPrefix(mimeType, "image/svg+xml") {
return http.Error(w, "Nur Bild-Uploads sind erlaubt", http.StatusBadRequest)
log.Printf("Versuch, eine Nicht-Bild-Datei hochzuladen: %v", mimeType)
return
}
} }
_, err = file.Seek(0, io.SeekStart) _, err = file.Seek(0, io.SeekStart)
@ -158,7 +161,6 @@ func uploadHandler(w http.ResponseWriter, r *http.Request) {
return return
} }
forceUpload := r.FormValue("force_upload")
forceName := r.FormValue("force_name") forceName := r.FormValue("force_name")
var filename string var filename string