Mar 24, 2024 · Mar 5, 2024 · Mar 5, 2024 · Mar 5, 2024 · Feb 5, 2024 · Mar 5, 2024
diff --git a/...ice/lowcoder-domain/src/main/java/org/lowcoder/domain/asset/service/AssetServiceImpl.java b/...ice/lowcoder-domain/src/main/java/org/lowcoder/domain/asset/service/AssetServiceImpl.java

        // The reason we restrict file types here is to avoid having to deal with dangerous image types such as SVG,
        // which can have arbitrary HTML/JS inside of them.

 final MediaType contentType = filePart.headers().getContentType();
        if (contentType == null || !ALLOWED_CONTENT_TYPES.contains(contentType)) {
            return Mono.error(new BizException(BizError.INVALID_PARAMETER, "INCORRECT_IMAGE_TYPE"));
        }
Original file line number	Diff line number	Diff line change
Expand Up		@@ -61,7 +61,7 @@ public Mono<Asset> upload(Part filePart, int maxFileSizeKB, boolean isThumbnail)

		// The reason we restrict file types here is to avoid having to deal with dangerous image types such as SVG,
		// which can have arbitrary HTML/JS inside of them.

		final MediaType contentType = filePart.headers().getContentType();
		if (contentType == null \|\| !ALLOWED_CONTENT_TYPES.contains(contentType)) {
		return Mono.error(new BizException(BizError.INVALID_PARAMETER, "INCORRECT_IMAGE_TYPE"));
		}
Expand Down