Files
vaultwarden/src
BlackDex 1d0eaac260 Updated icon fetching.
- Added image type checking, and prevent downloading non images.
  We didn't checked this before, which could in turn could allow someone
to download an arbitrary file.
- This also prevents SVG images from being used, while they work on the
  web-vault and desktop client, they didn't on the mobile versions.
- Because of this image type checking we can return a valid file type
  instead of only 'x-icon' (which is still used as a fallback).
- Prevent rel values with `icon-mask`, these are not valid favicons.
2021-04-03 22:51:44 +02:00
..
2021-04-03 22:51:44 +02:00
2021-03-30 21:45:10 +02:00
2021-03-29 10:27:58 +02:00
2021-03-27 14:26:32 +00:00
2021-03-14 23:35:55 +01:00
2021-03-27 14:36:50 +00:00
2021-03-22 20:00:57 +01:00
2021-03-27 14:26:32 +00:00