From cd31ee75d3fe2e55c2bd0116113853bdf5c910d3 Mon Sep 17 00:00:00 2001
From: Zuzanna Ludzik <zuzanna.maria@protonmail.com>
Date: Mon, 27 Apr 2026 13:12:36 +0200
Subject: [PATCH] #2223 add check for instance logo allowed file types

---
 customize.dist/messages.js | 2 ++
 www/admin/inner.js         | 4 ++++
 2 files changed, 6 insertions(+)

diff --git a/customize.dist/messages.js b/customize.dist/messages.js
index 06268dfd3..3ea651d68 100755
--- a/customize.dist/messages.js
+++ b/customize.dist/messages.js
@@ -134,6 +134,8 @@ define(req, function(AppConfig, Default, Language) {
         }
     };
 
+    Messages.admin_logoType_error = 'The logo image file type is not allowed'; // XXX
+
     return Messages;
 
 });
diff --git a/www/admin/inner.js b/www/admin/inner.js
index 00765e344..d3ff09093 100644
--- a/www/admin/inner.js
+++ b/www/admin/inner.js
@@ -1064,9 +1064,13 @@ define([
 
             Util.onClickEnter($button, function () {
                 let files = input.files;
+                let fileTypes = ['image/png', 'image/svg+xml', 'image/jpeg'];
                 if (files.length !== 1) {
                     UI.warn(Messages.error);
                     return;
+                } else if (!fileTypes.includes(files[0].type)) {
+                    UI.warn(Messages.admin_logoType_error);
+                    return;
                 }
                 spinner.spin();
                 $button.attr('disabled', 'disabled');