From 8e8fd88857797062a733aac4a9a3850793e9e8c4 Mon Sep 17 00:00:00 2001 From: azivner Date: Tue, 8 Jan 2019 20:45:34 +0100 Subject: [PATCH] process only whitelisted mime types as an image, fixes #288 --- src/services/import/enex.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/services/import/enex.js b/src/services/import/enex.js index 09339ffed..81a7f386d 100644 --- a/src/services/import/enex.js +++ b/src/services/import/enex.js @@ -144,7 +144,7 @@ async function importEnex(file, parentNote) { }); } else if (currentTag === 'mime') { - resource.mime = text; + resource.mime = text.toLowerCase(); if (text.startsWith("image/")) { resource.title = "image"; @@ -222,7 +222,7 @@ async function importEnex(file, parentNote) { const mediaRegex = new RegExp(`]*>`, 'g'); - if (resource.mime.startsWith("image/")) { + if (["image/jpeg", "image/png", "image/gif"].includes(resource.mime)) { const originalName = "image." + resource.mime.substr(6); const { url } = await imageService.saveImage(resource.content, originalName, noteEntity.noteId);