In looking at cffile using upload I see this for the allowed allowedExtensions "A comma-separated list of file extensions, which will be allowed for upload. For example, .png, .jpg, or, .jpeg. You can use "*" (star) to allow all files, except where you specify the MIME type in the accept attribute. Values specified in the attribute allowedExtensions override the list of blocked extensions in the server or application settings." I just want to make sure I'm not crazy and that it wont let me shortcut it to images/* to allow all images? Am I correct in this assumption? Any work arounds for that or am I just gonna list all image types

If you want to accept any image file type, I think you can do so by specifying

image/*

as the

accept

attribute value, and not specifying anything for

allowedExtensions

. That said, are you sure you want to accept literally any image type? If your app actually does something with those images besides just storing them, you might want to consider being more explicit in what you'll accept. Do you really want people uploading stuff like svg, avif, ico, webp, etc?