You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Have you thought about some protection from bad actors modifying url so that each request will trigger new transformation?
Its pretty easy to loop over few parameters in the url and get unique requests that caching wont catch.
Hi,
Have you thought about some protection from bad actors modifying url so that each request will trigger new transformation?
Its pretty easy to loop over few parameters in the url and get unique requests that caching wont catch.
Here is a good read, https://imagekit.io/blog/reduce-unauthorised-use-image-urls/
Hash sounds like a good idea. Include precomputed hash in the url, that will be checked for validity before performing transformation.
Thank you
The text was updated successfully, but these errors were encountered: