Fix Decap image filename validation

2026-09-04 12:00:49 -04:00
parent 52c2568ab9
commit 2d5cdc8878
3 changed files with 16 additions and 8 deletions
@@ -45,7 +45,7 @@ const markdownField = {
  editor_components: [],
 };
 const cmsImagePattern = [
-  '^/images/uploads/[A-Za-z0-9][A-Za-z0-9._-]*\\.(?:jpe?g|png|webp|avif)$',
+  '^[A-Za-z0-9][A-Za-z0-9._-]*\\.(?:jpe?g|png|webp|avif)$',
  'Choose an approved JPG, PNG, WebP, or AVIF upload. SVG and general files are not allowed.',
 ];
 const optionalImageField = {
@@ -160,6 +160,8 @@ allFields.forEach(visitField);
 const imageFields = allFields.filter(({ widget }) => widget === 'image');
 assert(imageFields.length === 7, 'Only the team image and six fixed page-image fields may expose media selection.');
 for (const field of imageFields) expectSubset(field, optionalImageField, `image field ${field.name}`);
+assert(new RegExp(cmsImagePattern[0]).test('example-photo.jpg'), 'Image widget validation must accept the filename Decap passes to field patterns.');
+assert(!new RegExp(cmsImagePattern[0]).test('example-photo.svg'), 'Image widget validation must reject SVG filenames.');

 const schema = await readFile('src/content.config.ts', 'utf8');
 for (const fragment of [