From a9dd2617021a658240a710d5e1020b5d93266249 Mon Sep 17 00:00:00 2001 From: Benny~ Date: Sun, 1 Mar 2020 15:33:54 +0800 Subject: [PATCH] fix extension check --- webp-server.go | 13 +++++++++---- 1 file changed, 9 insertions(+), 4 deletions(-) diff --git a/webp-server.go b/webp-server.go index cd514b6..3f3af94 100644 --- a/webp-server.go +++ b/webp-server.go @@ -138,18 +138,23 @@ func Convert(ImgPath string, AllowedTypes []string, QUALITY string) func(c *fibe } // check ext - // TODO: should remove this function. Check in Nginx. + // TODO: may remove this function. Check in Nginx. + var allowed = false for _, ext := range AllowedTypes { haystack := strings.ToLower(ImgFilename) needle := strings.ToLower("." + ext) if strings.HasSuffix(haystack, needle) { + allowed = true break } else { - c.Send("File extension not allowed!") - c.SendStatus(403) - return + allowed = false } } + if !allowed { + c.Send("File extension not allowed!") + c.SendStatus(403) + return + } // Check the original image for existence, if !imageExists(RawImageAbs) {