Restrict hotlink mimeType to image/* and harden image responses.

2026-10-26 23:06:23 +01:00
parent 5db90f02c5
commit bf36b1d2aa
6 changed files with 82 additions and 3 deletions
@@ -1,9 +1,10 @@
-import { IsMimeType, IsNotEmpty, IsString } from 'class-validator';
+import { IsNotEmpty, IsString } from 'class-validator';
+import { IsImageMimeType } from '../../../validation/decorators/isImageMimeType';
 import { UploadCiphertextOptionsDto } from './UploadCiphertextOptionsDto';

 export class CreateHotlinkUploadDto extends UploadCiphertextOptionsDto {
    @IsNotEmpty()
    @IsString()
-    @IsMimeType()
+    @IsImageMimeType()
    mimeType: string;
 }