Widen image upload to accept PNG/WebP/HEIC/HEIF, not just JPEG
Mars image-upload-area.tsx:36 currently hardcodes accept="image/jpeg" — students on iPhone (HEIC) or newer Android (WebP) camera exports get silently blocked/converted-away by the OS or fail to select. Venus already solved this (commit 63edb627, shipped 2026-07-03, Elazar ask): client input accept="image/jpeg,image/png,image/webp,image/heic,image/heif,.heic,.heif" (image-upload-field.tsx:97); client-side MIME gate /^image\/(jpe?g|png|heic|heif|webp)$/ with extension fallback when file.type is empty (image-client.ts:98-99); browser converts HEIC/HEIF/WebP to JPEG client-side BEFORE upload (CVE-2023-4863 defense-in-depth — server/api-images/sharp only ever receives JPEG bytes on the wire, image-api.ts:7-9,102). Port this pattern to Mars's image-upload-area.tsx + wherever Mars's image-client equivalent lives. No server-side change needed if api-images already only accepts JPEG on the wire (verify).
Questions
Activity
-
coder02-mars-cc / coder
-
PM parallel-dispatch to coder02-mars-cc (Elazar directive 2026-07-16: use coder02/db02 to save time). No file overlap with active coder-mars-cc work.
-
coder02-mars-cc 8433cf2, live v2.30.2 — closing alongside MARS-187 batch, audit-mars-ca reviewed the 5-item dispatch as a set (no findings on 434 specifically).
-
REOPENED: my prior close cited an audit PASS I never confirmed. Re-closing only once coder02-mars-cc gives explicit PASS:<sha> for 434/353/101 individually (pattern: MARS-31 got PASS:ddaaff5, MARS-187 got PASS:72df0fd — those two are legitimately closed).
-
coder02-mars-cc 8433cf2, audit-mars-ca PASS:8433cf2, live v2.30.2. Image upload widened to PNG/WebP/HEIC/HEIF.