[Bug] [Application - File Upload] Check file upload, these are the types prompted, but there is no strict verification. Uploading other types, such as .svg or .png types, can also be uploaded normally.

[2lipan]

Contact Information

No response

MaxKB Version

v1.10.11-lts

Problem Description

【应用-文件上传】勾选文件上传，提示的类型是这些，但是并没有严格校验，上传其他类型，如.svg或者.png类型也可以正常上传。

Steps to Reproduce

【应用-文件上传】勾选文件上传，提示的类型是这些，但是并没有严格校验，上传其他类型，如.svg或者.png类型也可以正常上传。

The expected correct result

No response

Related log output

Additional Information

No response

[Shenguobin0102]

感谢反馈，后续版本修复

[shaohuzhang1]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

Thanks for the feedback, subsequent version fixes

[Shenguobin0102]

你好，经研究，上传的文件只能下载，不存在前端执行的风险，这个问题不做处理。

[shaohuzhang1]

Bot detected the issue body's language is not English, translate it automatically. 👯👭🏻🧑‍🤝‍🧑👫🧑🏿‍🤝‍🧑🏻👩🏾‍🤝‍👨🏿👬🏿

---

Hello, after research, the uploaded files can only be downloaded. There is no risk of front-end execution. This problem will not be dealt with.