postiz-app/apps/backend
Santosh Bhandari 00b59ec2f4
Some checks failed
Build / build (22.12.0) (push) Has been cancelled
fix: validate MCP attachment formats and align media allowlist
Reject non-mp4 / non-image attachment URLs in the MCP
integrationSchedulePostTool (previously accepted any URL). Introduce
a single ALLOWED_POST_MEDIA source of truth in helpers/has.extension
and derive VALID_POST_MEDIA_EXTENSIONS + VALID_POST_MEDIA_MIME_TYPES
from it, replacing duplicated constants in the file upload pipe, the
public-api URL upload controller, and the ValidUrlExtension DTO
validator. Error messages now consistently list the allowed
extensions across the public API and MCP.
2026-05-19 13:56:09 +05:45
..
src fix: validate MCP attachment formats and align media allowlist 2026-05-19 13:56:09 +05:45
.gitignore feat: move to pnpm 2025-05-06 00:09:59 +07:00
nest-cli.json feat: move to pnpm 2025-05-06 00:09:59 +07:00
package.json feat: upgrade to node 22 2025-10-16 23:59:01 +07:00
tsconfig.build.json feat: move to pnpm 2025-05-06 00:09:59 +07:00
tsconfig.json feat: move to pnpm 2025-05-06 00:09:59 +07:00