Prevent unreasonably long MIME types

1 files changed, 3 insertions, 0 deletions

diff --git a/fhost.py b/fhost.py
index faf6d03..c1fd7cc 100755
--- a/fhost.py
+++ b/fhost.py
@@ -227,6 +227,9 @@ class File(db.Model):
             if mime in app.config["FHOST_MIME_BLACKLIST"] or guess in app.config["FHOST_MIME_BLACKLIST"]:
                 abort(415)
 
+            if len(mime) > 128:
+                abort(400)
+
             if mime.startswith("text/") and not "charset" in mime:
                 mime += "; charset=utf-8"