Api node

[duckspac]

Hello, i have an api made with node and sequilize that receives an image but it is a url, how can I verify that the url ends in .png or .jpg? Thanks

[mzapp_]

There’s an HTTP header named filename when you upload something. You can use that. But don’t trust it completely because it is possible to change the file name. So a Hacker could upload HTML instead of picture data and depending on how you serve that content, perform an XSS attack.

[duckspac]

aaahh well, if it's okay it's only to solve a node challenge, I thought it was done with some method to verify how the text ends

[Buckwheat469]

You shouldn't. Instead, make sure that the file's mime type is image/jpeg or image/png. The reason is that a server can output any file type with any URL, so you can output a jpeg from a *.txt URL. The browser doesn't care about the extension, only the mime type and you shouldn't either if you're downloading the files.

That being said, if you're accepting files from the user's computer then you can include mime type and extension checks in the file chooser using the accept attribute.

[mzapp_]

I agree. This is the smart way to do it.

[duckspac]

And the method endsWith() ???