search

benwbrum / fromthepage

FromThePage is a wiki-like application for crowdsourcing transcription of handwritten documents.
http://fromthepage.com
GNU Affero General Public License v3.0
170 stars 50 forks source link

Carrierwave deprecated 'extension_white_list' #4325

Closed WillNigel23 closed 3 days ago

WillNigel23 commented 1 week ago

https://github.com/carrierwaveuploader/carrierwave#securing-uploads

Latest version of carrierwave seems to have changed extension_white_list to extension_allowlist

This makes current uploader unsafe to prohibited file types to be uploaded.

benwbrum commented 1 week ago

Good catch!