Restricting uploads to specific file extensions

[Cordelya]

Is there currently any way to specify permitted file extensions for uploads by non-logged-in users? So that a user that isn't logged in can upload files, but only if the file extension is in the list.

I checked the Issues, both closed and open, and looked through the main readme as well as some of what's in the docs directory.

[9001]

not a built-in feature because blocking uploads based on file extension does not offer any real security benefits;

such a restriction can easily be avoided by simply renaming the file to something else, and most software will ignore the file extension entirely, and instead look at the magic number to determine what type of file it is

furthermore there are many polyglot files which will break any such filtering, for example the poc||gtfo zines;

• how about a pdf, and a zipfile, an also an android app you can install
• or perhaps a pdf, and a zipfile, which btw runs on a NES because it is also a game

if you really want to, you can implement this functionality as an eventhook (plugin) https://github.com/9001/copyparty/tree/hovudstraum/bin/hooks but know that this is probably a mistake