[openstreetmap/openstreetmap-website] User's profile image can break the access to OPenStreetMap (#2334)

[Jorge Gustavo Rocha]

Hi,

One user uploaded his photo as an *.eps image. There is no mechanism to prevent users from uploading *.eps images.

But afterwards, the user was not able to login (either in the desktop or mobile) and his account was not reachable.

Only with the support from @tomhughes we were able to see that an *.eps image was used in the profile.

May we prevent users from uploading this kind of problematic file formats? Can we restrict just to *.jpg, *.gif and *.png?

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/issues/2334
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20190731/b7ec3452/attachment.html>