Description
Similar to #2602
Currently there are only "image/png", "image/jpeg", "image/gif", "image/webp", "image/avif" MIMEs allowed for images, and uploading a bitmap image will lead to "File type not allowed" exception.
Same as AVIF, bitmap is also safe and will not bring stored XSS like svg.
Steps to reproduce
- Go to any media section
- Upload a bitmap image
- Upload failed: File type not allowed
Environment
"emdash": "0.36.0",
Screenshots
Logs / error output
Description
Similar to #2602
Currently there are only
"image/png", "image/jpeg", "image/gif", "image/webp", "image/avif"MIMEs allowed for images, and uploading a bitmap image will lead to "File type not allowed" exception.Same as AVIF, bitmap is also safe and will not bring stored XSS like svg.
Steps to reproduce
Environment
"emdash": "0.36.0",
Screenshots
Logs / error output