CaramelFur / Picsur

An easy to use, selfhostable image sharing service like Imgur with built in converting
https://picsur.org/
GNU Affero General Public License v3.0
774 stars 41 forks source link

Add a settings to limit the width & height params #78

Open lionep opened 7 months ago

lionep commented 7 months ago

Hello,

Nice project out there ! I've tried it and it seems you can overscale pictures, and get some insufficient memory usage.

Would it be possible to implement :

Also, it seems that every different size request is stored in e_image_derivative_backend table, so a anon user can fillup the disk with commands like :

for I in `seq 100 500`; do
  curl -v https://picsur.domain.com/i/SOME_PICTURE_ID.jpg\?height\=$I
done

Any idea of a protection agains this ?

Thanks !