Merge pull request #342 from Jueuunn7/main

프로필 파일 업로드 취약점 패치
GSM-MSG · Jul 3, 2024 · ffb204d · ffb204d
2 parents 817b50e + cb4740e
commit ffb204d
Showing 1 changed file with 5 additions and 5 deletions.
diff --git a/src/main/kotlin/com/msg/gauth/global/thirdparty/aws/s3/S3Util.kt b/src/main/kotlin/com/msg/gauth/global/thirdparty/aws/s3/S3Util.kt
@@ -21,11 +21,11 @@ class S3Util(
 
         val splitFile = image.originalFilename.toString().split(".")
 
-        if(splitFile.size < 2)
+        if(splitFile.size != 2)
             throw FileExtensionInvalidException()
-
-        val extension = splitFile[1].lowercase()
-
+            
+        val extension = splitFile.last().lowercase()
+        
         if(list.none { it == extension })
             throw FileExtensionInvalidException()
 
@@ -49,4 +49,4 @@ class S3Util(
 
         amazonS3.deleteObject(bucket, key)
     }
-}
+}