mirrors/pleroma
1
0
Fork 0
mirror of https://git.pleroma.social/pleroma/pleroma.git synced 2024-06-01 08:28:06 +00:00
Code Issues Projects Releases Wiki Activity

Switch to filtering out various xml and html types by focusing on the subtype

Browse source
This commit is contained in:
Mark Felder 2023-05-31 10:24:51 -04:00
parent 70023a1571
commit 33d566f2ac
1 changed files with 4 additions and 9 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
lib/pleroma/web/plugs/uploaded_media.ex
View file

@ -118,15 +118,10 @@ defmodule Pleroma.Web.Plugs.UploadedMedia do
[_type, subtype] = String.split(mimetype, "/")
cond do
String.contains?(subtype, ["javascript", "ecmascript", "jscript"]) ->
plaintext_header()
String.contains?(mimetype, ["text/html", "text/xml", "application/xml"]) ->
plaintext_header()
true ->
[]
if String.contains?(subtype, ["javascript", "ecmascript", "jscript", "html", "xml"]) do
plaintext_header()
else
[]
end
end