wingbot 3.62.1 → 3.63.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "wingbot",
-  "version": "3.62.1",
+  "version": "3.63.0",
   "description": "Enterprise Messaging Bot Conversation Engine",
   "main": "index.js",
   "scripts": {

package/plugins/ai.wingbot.upload/plugin.js

@@ -1,4 +1,5 @@
 const Router = require('../../src/Router');
+const { compileWithState } = require('../../src/utils');
 
 /**
  *
@@ -6,6 +7,7 @@ const Router = require('../../src/Router');
  * @param {'any'|'image'|'audio'|'video'|'file'} params.type
  * @param {string} params.variable
  * @param {'array'|'string'} params.datatype
+ * @param {string} params.allowSuffixes
  * @returns {import('../../src/Router').Middleware}
  */
 module.exports = (params) => {
@@ -15,10 +17,21 @@ module.exports = (params) => {
      * @param {import('../../src/Responder')} res
      */
     const uploadPlugin = async (req, res) => {
+
+        const allowSuffixes = compileWithState(req, res, params.allowSuffixes)
+            .split(',')
+            .map((s) => s.toLowerCase().trim())
+            .filter((s) => !!s);
+
         if (req.isAttachment()) {
+            const suffixOk = allowSuffixes.length === 0
+                || req.attachments.every((a) => {
+                    const [, suffix = ''] = a.payload.url.match(/\.([a-z0-9]+)(\?.+)?$/i) || [];
+                    return allowSuffixes.includes(suffix.toLowerCase());
+                });
 
             const typeOk = (!params.type || params.type === 'any')
-                || req.attachments.every((a) => a.type === params.type);
+                || (req.attachments.every((a) => a.type === params.type) && suffixOk);
 
             if (!typeOk) {
                 await res.run('badType');

package/plugins/plugins.json

@@ -644,6 +644,11 @@
                         { "value": "string", "label": "string" },
                         { "value": "array", "label": "array of strings" }
                     ]
+                },
+                {
+                    "name": "allowSuffixes",
+                    "label": "Allowed attachment suffixes (comma separated)",
+                    "type": "text"
                 }
             ],
             "items": [