mirror/Spark
3
0
Fork 0
mirror of https://github.com/igniterealtime/Spark.git synced 2026-02-04 12:15:30 +00:00
Code Issues Projects Releases Wiki Activity

SPARK-2380: insertPicture(): Check if the file extension is a known image type

Browse Source
This commit is contained in:
Sergey Ponomarev
2026-01-08 02:28:33 +02:00
committed by Guus der Kinderen
parent ef36f0ac6e
commit cd011e6ce4
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
core/src/main/java/org/jivesoftware/spark/ui/MessageEntry.java
View File

@ -33,6 +33,7 @@ import javax.swing.text.*;
import java.awt.*;
import java.awt.image.BufferedImage;
import java.net.URI;
import java.net.URLConnection;
import java.time.ZonedDateTime;
import java.util.List;
import java.util.*;
@ -386,6 +387,11 @@ public class MessageEntry extends TimeStampedEntry
if (path == null || path.isEmpty()) {
return false;
}
// Check if the file extension is a known image type
String mimeType = URLConnection.getFileNameMap().getContentTypeFor(path);
if (mimeType == null || !mimeType.startsWith("image/")) {
return false;
}
try (final CloseableHttpClient httpClient =
HttpClients.custom()