Image Attachment Test Forum - File extensions can't be trusted

.tar.zip.jpg is ok.

.tar.zip.jpg.zip as an actual zip file containing 1 image is not ok.

Attached Images

Looks like it sneaks a peak at the image - Puckdropper, Sun Mar 26 2023 9:29am
before it uploads. I just tried a binary file renamed to .jpg and it says "Error uploading image". The aqua does look nice. Hm... What if I do something silly like rename a .jpg to .bmp? Or I know...... more
- File extensions can't be trusted - Puckdropper, Sun Mar 26 2023 9:36am
- - It looks like it's the browser who sends the content type... - Erik_, Fri Mar 31 2023 2:12pm
    of the attachment based on the file extension. I did a test where I renamed one of my png's to '.tar.gz' and I see in the browser request to the website, it set the file content type as 'application/gzip'... more