Update routes/notifications.py

routes/notifications.py

@@ -92,6 +92,10 @@ async def log_notification(send_by: str, title: str, content: str, target_id: Op
                 detail = await resp.text()
                 raise HTTPException(status_code=500, detail=f"Failed to log notification: {detail}")
 
+def is_valid_image_url(url: str) -> bool:
+    valid_extensions = (".jpg", ".jpeg", ".png", ".gif", ".webp")
+    return url.lower().endswith(valid_extensions)
+
 @router.post("/send-global-notification")
 async def send_global_notification(
     payload: SimpleNotification,
@@ -103,6 +107,10 @@ async def send_global_notification(
     if not sender or not sender.get("manage_notifications"):
         raise HTTPException(status_code=403, detail="You are not authorized to send notifications.")
 
+    # Validate image_url, if provided
+    if payload.image_url and not is_valid_image_url(payload.image_url):
+        raise HTTPException(status_code=400, detail="The image_url provided is not a valid image format.")
+
     message = {
         "notification": {
             "title": payload.title,