search

Jonathan5122827 / ImageProc

Image Processor application
0 stars 1 forks source link

File spoofing vulnerability. #5

Closed collin-lyon closed 2 years ago

collin-lyon commented 2 years ago

Currently, there is no way to confirm that an uploaded picture is actually a picture, and not some other file artificially given a picture file type. This can be probably be fixed using a 'mime type' library, which could read the header of the data to confirm that the file type is real.

collin-lyon commented 2 years ago

This is a functional requirement, as it is related to open image, a FR.

kalvingarcia commented 2 years ago

Fixed this one too, hopefully!