From 02119ec95e559b1b6d4b48c3b4c8e5ce03e7a299 Mon Sep 17 00:00:00 2001
From: JakobDev <jakobdev@gmx.de>
Date: Fri, 21 Apr 2023 23:58:59 +0200
Subject: [PATCH] Limit avatar upload to valid image files (#24258)

This causes the browser to allow only valid images in the file picker by
default.

---------

Co-authored-by: silverwind <me@silverwind.io>
---
 templates/org/settings/options.tmpl  | 2 +-
 templates/repo/settings/options.tmpl | 2 +-
 templates/user/settings/profile.tmpl | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/templates/org/settings/options.tmpl b/templates/org/settings/options.tmpl
index 1caa4210e6..56ad5fa896 100644
--- a/templates/org/settings/options.tmpl
+++ b/templates/org/settings/options.tmpl
@@ -91,7 +91,7 @@
 						{{.CsrfTokenHtml}}
 						<div class="inline field">
 							<label for="avatar">{{.locale.Tr "settings.choose_new_avatar"}}</label>
-							<input name="avatar" type="file" >
+							<input name="avatar" type="file" accept="image/png,image/jpeg,image/gif,image/webp">
 						</div>
 
 						<div class="field">
diff --git a/templates/repo/settings/options.tmpl b/templates/repo/settings/options.tmpl
index 1aaf58ee91..81c1e4759e 100644
--- a/templates/repo/settings/options.tmpl
+++ b/templates/repo/settings/options.tmpl
@@ -60,7 +60,7 @@
 				{{.CsrfTokenHtml}}
 				<div class="inline field">
 					<label for="avatar">{{.locale.Tr "settings.choose_new_avatar"}}</label>
-					<input name="avatar" type="file" >
+					<input name="avatar" type="file" accept="image/png,image/jpeg,image/gif,image/webp">
 				</div>
 
 				<div class="field">
diff --git a/templates/user/settings/profile.tmpl b/templates/user/settings/profile.tmpl
index e64f4c7efa..7ef9a955a7 100644
--- a/templates/user/settings/profile.tmpl
+++ b/templates/user/settings/profile.tmpl
@@ -123,7 +123,7 @@
 
 				<div class="inline field">
 					<label for="avatar">{{.locale.Tr "settings.choose_new_avatar"}}</label>
-					<input name="avatar" type="file" >
+					<input name="avatar" type="file" accept="image/png,image/jpeg,image/gif,image/webp">
 				</div>
 
 				<div class="field">