image以外はproxyしないように (misskey-dev#5051)

mei23 · Jun 21, 2019 · 2c2de12 · 2c2de12
1 parent e274c73
commit 2c2de12
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/server/proxy/proxy-media.ts b/src/server/proxy/proxy-media.ts
@@ -17,6 +17,8 @@ export async function proxyMedia(ctx: Koa.BaseContext) {
 
 		const [type, ext] = await detectMine(path);
 
+		if (!type.startsWith('image/')) throw 403;
+
 		let image: IImage;
 
 		if ('static' in ctx.query && ['image/png', 'image/gif'].includes(type)) {