From 7112341c51284994e968357163548eea5ee63882 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Simon=20Mart=C3=ADn?= <oleurud@gmail.com>
Date: Fri, 11 May 2018 17:41:00 +0200
Subject: [PATCH] checkStaticImageFormat middleware

---
 .../api/middlewares/check-static-image-format.js      | 11 +++++++++++
 1 file changed, 11 insertions(+)
 create mode 100644 lib/cartodb/api/middlewares/check-static-image-format.js

diff --git a/lib/cartodb/api/middlewares/check-static-image-format.js b/lib/cartodb/api/middlewares/check-static-image-format.js
new file mode 100644
index 00000000..d72fcb81
--- /dev/null
+++ b/lib/cartodb/api/middlewares/check-static-image-format.js
@@ -0,0 +1,11 @@
+const VALID_IMAGE_FORMATS = ['png', 'jpg', 'jpeg'];
+
+module.exports = function checkStaticImageFormat () {
+    return function checkStaticImageFormatMiddleware (req, res, next) {
+        if(!VALID_IMAGE_FORMATS.includes(req.params.format.toLowerCase())) {
+            return next(new Error(`Unsupported image format "${req.params.format}"`));
+        }
+
+        next();
+    };
+};