Skip to content
This repository has been archived by the owner on Jan 6, 2023. It is now read-only.

File renaming makes upload restriction pointless #2413

Open
ji-ava opened this issue Apr 7, 2021 · 1 comment
Open

File renaming makes upload restriction pointless #2413

ji-ava opened this issue Apr 7, 2021 · 1 comment

Comments

@ji-ava
Copy link

ji-ava commented Apr 7, 2021

It's possible to edit a file item and change the name. This change does not seem to check the Mimetype Whitelist, which means the latter feature is basically pointless – I can upload any file I want by setting the name to an allowed extension and then changing it back after upload.

Observed with v8.4.0 – I don't have a v9 instance available to check if this is still the case.

@rijkvanzanten rijkvanzanten transferred this issue from directus/directus Apr 7, 2021
@benhaynes
Copy link
Member

Let's confirm if this is still the case in v9, if not this will be transferred to the legacy repo.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants