Erik_
It looks like it's the browser who sends the content type...
Fri Mar 31, 2023 2:12pm
68.194.25.15

of the attachment based on the file extension.

I did a test where I renamed one of my png's to '.tar.gz' and I see in the browser request to the website, it set the file content type as 'application/gzip'

Content-Disposition: form-data; name="image"; filename="Screenshot from 2023-03-30 15-54-47.tar.gz"
Content-Type: application/gzip

Which was then rejected by the site due to it not having an 'image/*' content type:
Failed to upload image: INVALID_CONTENT_TYPE :: Content type: application/gzip is not valid for upload.

  • File extensions can't be trusted - Puckdropper, Sun Mar 26 2023 9:36am
    .tar.zip.jpg is ok. .tar.zip.jpg.zip as an actual zip file containing 1 image is not ok.
    • It looks like it's the browser who sends the content type... - Erik_, Fri Mar 31 2023 2:12pm