check if extension mime type == content mime type (#37)

Author: SulaimanMAS

lib/mini_defender/rules/mime_types.rb

@@ -28,9 +28,10 @@ def self.make(args)
   def passes?(attribute, value, validator)
     @file = value.is_a?(ActionDispatch::Http::UploadedFile)
     content_type = Marcel::MimeType.for(value.read)
+    extension_mime_type = Marcel::MimeType.for(extension: File.extname(value.original_filename))
     value.rewind
 
-    @file && @types.include?(content_type)
+    @file && @types.include?(content_type) && content_type == extension_mime_type
   end
 
   def message(attribute, value, validator)

lib/mini_defender/version.rb

@@ -1,5 +1,5 @@
 # frozen_string_literal: true
 
 module MiniDefender
-  VERSION = "0.8.0"
+  VERSION = "0.8.1"
 end