dangerous extension error

2025-10-30 08:34:30 +02:00
parent 32691b0c0d
commit b4d5a2cad4
3 changed files with 30 additions and 3 deletions
@@ -34,6 +34,8 @@ module Api
      end

      render json: attachment.as_json(only: %i[uuid created_at], methods: %i[url filename content_type])
+    rescue Submitters::MaliciousFileExtension => e
+      render json: { error: e.message }, status: :unprocessable_entity
    end

    def build_new_cookie_signatures_json(submitter, attachment)