Fix assets extension detection (#15231)

6 years ago · 63a57fb7e5
parent a75e0f5145
commit 63a57fb7e5
1 changed files with 1 additions and 1 deletions
--- a/app/assets/server/assets.js
+++ b/app/assets/server/assets.js
@ -488,7 +488,7 @@ WebApp.connectHandlers.use('/assets/', Meteor.bindEnvironment(function(req, res,

 	const file = assets[params.asset] && assets[params.asset].cache;

-	const format = req.url.replace(/.*\.([a-z]+)$/, '$1');
+	const format = req.url.replace(/.*\.([a-z]+)(?:$|\?.*)/i, '$1');

 	if (assets[params.asset] && Array.isArray(assets[params.asset].constraints.extensions) && !assets[params.asset].constraints.extensions.includes(format)) {
 		res.writeHead(403);