users: disallow more names ending with file extensions.

Disallow any name that has a suffix registered as a file extension in Rails.
2022-12-05 20:39:27 -06:00
parent d9dc84325f
commit d157899226
2 changed files with 2 additions and 1 deletions
--- a/config/initializers/mime_types.rb
+++ b/config/initializers/mime_types.rb
@@ -9,3 +9,4 @@ Mime::Type.register "image/webp", :webp
 Mime::Type.register "image/avif", :avif

 Mime::Type.register "application/x-shockwave-flash", :swf
+Mime::Type.register "application/vnd.microsoft.portable-executable", :exe