feat(assets): file upload extension validation

[arashsheyda]

this PR adds:

• file extension validation
• filter between uploaded file extensions
• file upload button to access dropdown

but there is no token validation for adding extension(so there is still a security issue), is it a good idea to add a token? param to updateOptions RPC ?

assets-ext-val.mp4

[antfu]

Why do we need to valid the extension of uploads?

[arashsheyda]

@antfu to be more safe, for example when accessing from a public network, we make sure that nothing harmful(e.g. an .exe file) can't be uploaded unless the user wants to.

[antfu]

In that case, I think we should make it in the module options (nuxt.config.ts) that are not updatable from the client, and do the verification on the server side

[arashsheyda]

@antfu sure! that cross my mind too. thanks

[antfu]

Could you help resolve the conflicts? Thanks!

[arashsheyda]

Could you help resolve the conflicts? Thanks!

Sure! I'll try to do it today. thanks