Fix cve-2023-24249

Fix cve-2023-24249 (z-song/laravel-admin#5805)
neohitokiri · Dec 8, 2023 · b9751ed · b9751ed
1 parent dc6206d
commit b9751ed
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/Form/Field/Image.php b/src/Form/Field/Image.php
@@ -20,7 +20,7 @@ class Image extends File
      *
      * @var string
      */
-    protected $rules = 'image';
+    protected $rules = 'image|mimes:bmp,jpg,png,jpeg,gif,svg,webp';
 
     protected function setType($type = 'image')
     {