summaryrefslogtreecommitdiff
path: root/packages/backend/src/const.ts
diff options
context:
space:
mode:
authorsyuilo <Syuilotan@yahoo.co.jp>2021-12-26 01:43:51 +0900
committersyuilo <Syuilotan@yahoo.co.jp>2021-12-26 01:43:51 +0900
commitd53795184cd0ee326b0da58b267e3460f948703c (patch)
treebb6c8a62f79116f3e4f4baa8d26d44d1ad08352f /packages/backend/src/const.ts
parentenhance(client): :art: (diff)
downloadmisskey-d53795184cd0ee326b0da58b267e3460f948703c.tar.gz
misskey-d53795184cd0ee326b0da58b267e3460f948703c.tar.bz2
misskey-d53795184cd0ee326b0da58b267e3460f948703c.zip
enhance(server): better content type detection
Diffstat (limited to 'packages/backend/src/const.ts')
-rw-r--r--packages/backend/src/const.ts31
1 files changed, 31 insertions, 0 deletions
diff --git a/packages/backend/src/const.ts b/packages/backend/src/const.ts
index 43f59f1e4f..eb0c81f2c7 100644
--- a/packages/backend/src/const.ts
+++ b/packages/backend/src/const.ts
@@ -1,2 +1,33 @@
export const USER_ONLINE_THRESHOLD = 1000 * 60 * 10; // 10min
export const USER_ACTIVE_THRESHOLD = 1000 * 60 * 60 * 24 * 3; // 3days
+
+// ブラウザで直接表示することを許可するファイルの種類のリスト
+// ここに含まれないものは application/octet-stream としてレスポンスされる
+// SVGはXSSを生むので許可しない
+export const FILE_TYPE_WHITELIST = [
+ 'image/png',
+ 'image/gif',
+ 'image/jpeg',
+ 'image/webp',
+ 'image/apng',
+ 'image/bmp',
+ 'image/tiff',
+ 'image/x-icon',
+ 'video/mpeg',
+ 'video/mp4',
+ 'video/mp2t',
+ 'video/webm',
+ 'video/ogg',
+ 'video/3gpp',
+ 'video/quicktime',
+ 'video/x-m4v',
+ 'video/x-msvideo',
+ 'audio/mpeg',
+ 'audio/aac',
+ 'audio/wav',
+ 'audio/webm',
+ 'audio/ogg',
+ 'audio/x-m4a',
+ 'audio/x-flac',
+ 'application/ogg',
+];