search

tchapgouv / tchap-web-v4

A Matrix web client for Tchap
https://www.tchap.gouv.fr/
Apache License 2.0
12 stars 4 forks source link

Changing avatar should forbid webp and svg format #840

Open odelcroi opened 7 months ago

odelcroi commented 7 months ago

Steps to reproduce

  1. Where are you starting? What can you see?
  2. What do you click?
  3. More steps…

Outcome

What did you expect?

What happened instead?

Operating system

No response

Browser information

No response

URL for webapp

No response

Application version

No response

Homeserver

No response

Will you send logs?

Yes

estellecomment commented 7 months ago

why ?

odelcroi commented 7 months ago

We have experienced that webp in avatar don't work with Tchap. to be reproduced Why?

We might have blocked them with the last vulnerability @theguyhimself ?

Anyway, P3 definitively