ulysia/szurubooru
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Added stricter validation to user avatars

Browse source
This commit is contained in:
Marcin Kurczewski 2014-09-20 20:42:19 +02:00
parent cd146e0750
commit b01adce156
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
src/FormData/UserEditFormData.php
View file

@ -38,6 +38,16 @@ class UserEditFormData implements \Szurubooru\IValidatable
if ($this->email !== null)
$validator->validateEmail($this->email);
if (strlen($this->avatarContent) > 1024 * 512)
throw new \DomainException('Avatar content must have at most 512 kilobytes.');
if ($this->avatarContent)
{
$avatarContentMimeType = \Szurubooru\Helpers\MimeHelper::getMimeTypeFromBuffer($this->avatarContent);
if (!\Szurubooru\Helpers\MimeHelper::isImage($avatarContentMimeType))
throw new \DomainException('Avatar must be an image (detected: ' . $avatarContentMimeType . ').');
}
if ($this->browsingSettings !== null)
{
if (!is_string($this->browsingSettings))