[SECURITY] Do not allow SVG files for logos

This commit is contained in:
Raphael Michel
2017-08-20 15:35:00 +02:00
parent 3428ea2f18
commit 5c91352bae
2 changed files with 2 additions and 2 deletions

View File

@@ -704,7 +704,7 @@ class DisplaySettingsForm(SettingsForm):
)
logo_image = ExtFileField(
label=_('Logo image'),
ext_whitelist=(".png", ".jpg", ".svg", ".gif", ".jpeg"),
ext_whitelist=(".png", ".jpg", ".gif", ".jpeg"),
required=False,
help_text=_('If you provide a logo image, we will by default not show your events name and date '
'in the page header. We will show your logo with a maximal height of 120 pixels.')