diff options
| author | Kanacchi <[email protected]> | 2017-03-28 00:00:08 +0200 |
|---|---|---|
| committer | GitHub <[email protected]> | 2017-03-28 00:00:08 +0200 |
| commit | 3e38e138ca5b39d1b94e0b536fe44e322836f82f (patch) | |
| tree | 9273627f5f8466facc12b3685765410a79d441cb /controllers/uploadController.js | |
| parent | Merge pull request #21 from RyoshiKayo/patch-2 (diff) | |
| parent | added array with blocked file extensions (diff) | |
| download | host.fuwn.me-3e38e138ca5b39d1b94e0b536fe44e322836f82f.tar.xz host.fuwn.me-3e38e138ca5b39d1b94e0b536fe44e322836f82f.zip | |
Merge pull request #22 from Onestay/onestay
added array with blocked file extensions
Diffstat (limited to 'controllers/uploadController.js')
| -rw-r--r-- | controllers/uploadController.js | 8 |
1 files changed, 7 insertions, 1 deletions
diff --git a/controllers/uploadController.js b/controllers/uploadController.js index 39a9364..d9ca04e 100644 --- a/controllers/uploadController.js +++ b/controllers/uploadController.js @@ -20,7 +20,13 @@ const storage = multer.diskStorage({ const upload = multer({ storage: storage, - limits: { fileSize: config.uploads.maxSize } + limits: { fileSize: config.uploads.maxSize }, + fileFilter: function(req, file, cb) { + if (config.blockedExtensions.some((extension) => { return path.extname(file.originalname) === extension; })) { + return cb('This file extension is not allowed'); + } + return cb(null, true); + } }).array('files[]') uploadsController.upload = function(req, res, next) { |