Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

protect from missuse #924

Open
tasiotas opened this issue Jul 21, 2023 · 1 comment
Open

protect from missuse #924

tasiotas opened this issue Jul 21, 2023 · 1 comment

Comments

@tasiotas
Copy link

Hi,

Have you thought about some protection from bad actors modifying url so that each request will trigger new transformation?
Its pretty easy to loop over few parameters in the url and get unique requests that caching wont catch.

Here is a good read, https://imagekit.io/blog/reduce-unauthorised-use-image-urls/

Hash sounds like a good idea. Include precomputed hash in the url, that will be checked for validity before performing transformation.

Thank you

@ausir0726
Copy link
Contributor

Regarding the issue of image abuse, you can track this ISSUE if the provider is the default 'ipx'.

unjs/ipx#45

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants