QingdaoU/Spirit
1
0
Fork 0
mirror of https://github.com/QingdaoU/Spirit.git synced 2025-01-16 01:13:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

settings image comment

Browse Source
This commit is contained in:
nitely 2017-08-18 18:15:28 -03:00
parent 6df31f3cf6
commit c640002572
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
spirit/settings.py
View File

@ -28,6 +28,9 @@ ST_USER_LAST_SEEN_THRESHOLD_MINUTES = 1
ST_PRIVATE_FORUM = False
# PNG is not allowed by default due to:
# An HTML file can be uploaded as an image
# if that file contains a valid PNG header
# followed by malicious HTML. See:
# https://docs.djangoproject.com/en/1.11/topics/security/#user-uploaded-content
ST_ALLOWED_UPLOAD_IMAGE_FORMAT = ('jpeg', 'gif')
ST_ALLOWED_URL_PROTOCOLS = {