back round 0 view raw

knotserver: also serve text/plain in BlobRaw #388

merged

opened by

anirudh.fi 4 months ago targeting master from push-svtkmrzmrwky

Signed-off-by: Anirudh Oppiliappan anirudh@tangled.sh

options

unified split

Changed files

+11 -3

knotserver

routes.go

+11 -3

knotserver/routes.go

···

       286
       286
        
       		mimeType = "image/svg+xml"

     

       287
       287
        
       	}

     

       288
       288
        
       

     

       289
       289
       -
       	if !strings.HasPrefix(mimeType, "image/") && !strings.HasPrefix(mimeType, "video/") {

     

       290
       290
       -
       		l.Error("attempted to serve non-image/video file", "mimetype", mimeType)

     

       291
       291
       -
       		writeError(w, "only image and video files can be accessed directly", http.StatusForbidden)

     

       289
       289
       +
       	// allow image, video, and text/plain files to be served directly

     

       290
       290
       +
       	switch {

     

       291
       291
       +
       	case strings.HasPrefix(mimeType, "image/"):

     

       292
       292
       +
       		// allowed

     

       293
       293
       +
       	case strings.HasPrefix(mimeType, "video/"):

     

       294
       294
       +
       		// allowed

     

       295
       295
       +
       	case strings.HasPrefix(mimeType, "text/plain"):

     

       296
       296
       +
       		// allowed

     

       297
       297
       +
       	default:

     

       298
       298
       +
       		l.Error("attempted to serve disallowed file type", "mimetype", mimeType)

     

       299
       299
       +
       		writeError(w, "only image, video, and text files can be accessed directly", http.StatusForbidden)

     

       292
       300
        
       		return

     

       293
       301
        
       	}

     

       294
       302