No internet connection
  1. Home
  2. Issues

Restrict allowed upload file types, default to images only

By KajMagnus @KajMagnus2020-11-26 22:14:19.091Z

Talkyard by default shouldn't let people upload anything else than images — most other file types are a bit risky, e.g. some PDF readers can ececute embedded Javascript.

Seems this will be fixed in the next or next-next version.

I'm making allowed upload file size and allowed file types configurable per user group — so one can, for example, let Trusted Members or Core Members, upload more different file types, or prevent new members from uploading anything at all. @phoenix

  • 2 replies
  1. In reply toKajMagnus:
    KajMagnus @KajMagnus2020-12-03 13:33:04.640Z2020-12-03 14:08:04.220Z

    Now here at Ty .io, .jpg and other image types should work, but not other types. Let's try with an aardvark

    <!-- Uploaded file name: aardvark-test-pic.jpeg -->

    But these won't work: badext.docx badext.php etc.

    This'll be available in self hosted installs tomorrow? or the day after tomorrow

    (Although it's cute, it's not my aardvark — it's from a Disney blog, )

    1. In reply toKajMagnus:
      KajMagnus @KajMagnus2020-12-05 11:46:09.590Z2020-12-05 11:52:43.952Z

      Now this should work, Jeff @phoenix — if you try to upload a .pdf or .docx document, then, there sould be a Not-an-allowed-file-type error dialog. (I accidentally removed spaces " " from the allowed-file-types list in this dialog, will fix).

      If you want to, you can try and see if it works — your server ought to have upgraded itself, and by default only jpg jpeg png gif should be allowed, now. (You'll need to reload any Talkyard page you might have open already.)

      Here's the page where admins can configure permissions for all members:

      https:// talkyard server addr /-/groups/all_members/permissions

      About max upload size: For on-prem servers, there's a configurable Nginx hard limit at 25 MiB, so more than 25 MiB won't work.

      1. Progress
        with handling this problem
      2. @KajMagnus marked this topic as Started 2020-11-26 22:14:24.139Z.
      3. @KajMagnus marked this topic as Done 2021-01-02 13:04:45.189Z.