django-awesome-avatar
django-awesome-avatar copied to clipboard
upload process will replace images with duplicate file names
If I upload an avatar called img.png
, and you upload an avatar called img.png
your avatar will replace mine. This could be used to replace another user's avatar without their consent.