cagataygurturk / image-resizer-service

Serverless image resizing service for AWS
https://serverlessrepo.aws.amazon.com/#/applications/arn:aws:serverlessrepo:us-east-1:526515951862:applications~image-resizer-service
MIT License
101 stars 49 forks source link

Security: malicious user could waste resources #18

Open 7uxifer opened 4 years ago

7uxifer commented 4 years ago

As there is no upper bound on the size of an image, a user could create millions of huge images with a simple Postman script. I'd suggest at least the option to say don't scale an image larger than the original, (or some configurable value) and possibly a granularity so images aren't created that are 300px, 301px, 302px...600px for each of your hosted images.