From e11c9261f79e057f7b7925825839c5a0c0f39314 Mon Sep 17 00:00:00 2001 From: gitmotion Date: Thu, 13 Mar 2025 13:23:08 -0700 Subject: [PATCH] Fixed notifications config mapping and filename sanitation for cve/rce add svg to login / index for favicon ensure file sanitization before and during notification --- dev/docker-compose.dev.yml | 3 ++ public/index.html | 1 + public/login.html | 1 + src/routes/upload.js | 9 ++-- src/services/notifications.js | 81 +++++++++++++++++++++-------------- src/utils/fileUtils.js | 8 +++- 6 files changed, 67 insertions(+), 36 deletions(-) diff --git a/dev/docker-compose.dev.yml b/dev/docker-compose.dev.yml index 5f6c4f1..1b67621 100644 --- a/dev/docker-compose.dev.yml +++ b/dev/docker-compose.dev.yml @@ -20,6 +20,9 @@ services: - MAX_FILE_SIZE=1024 - AUTO_UPLOAD=false - DUMBDROP_TITLE=DumbDrop-Dev + # - APPRISE_URL=ntfy://dumbdrop-test + # - APPRISE_MESSAGE=[DEV] New file uploaded - {filename} ({size}), Storage used {storage} + # - APPRISE_SIZE_UNIT=auto command: npm run dev restart: unless-stopped # Enable container debugging if needed diff --git a/public/index.html b/public/index.html index f7097af..53b553a 100644 --- a/public/index.html +++ b/public/index.html @@ -8,6 +8,7 @@ +
diff --git a/public/login.html b/public/login.html index a1c9ee6..cf45426 100644 --- a/public/login.html +++ b/public/login.html @@ -5,6 +5,7 @@ {{SITE_TITLE}} - Login +