fix(xss): disallow svgs as avatars

rmuif · Oct 21, 2021 · daa2475 · daa2475
1 parent e8a1dd7
commit daa2475
Showing 1 changed file with 1 addition and 7 deletions.
diff --git a/template/src/components/AccountTab/AccountTab.js b/template/src/components/AccountTab/AccountTab.js
@@ -667,13 +667,7 @@ class AccountTab extends Component {
       return;
     }
 
-    const fileTypes = [
-      "image/gif",
-      "image/jpeg",
-      "image/png",
-      "image/webp",
-      "image/svg+xml",
-    ];
+    const fileTypes = ["image/gif", "image/jpeg", "image/png", "image/webp"];
 
     if (!fileTypes.includes(avatar.type)) {
       return;