Serverside Media Check #32
Labels
No labels
Bug
Cleanup/Refactor
Core Feature
Documentation
Feature
Performance Improvement
Security Improvement
UX/Accessibility
Unreproducable Bug
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set.
Reference: rainbownapkin/canopy#32
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
added #30 as parent issue
Looks like the best way to implement embedded media checks for chat is to send a HEAD request to get file size, and npm module 'file-type' for file-type checking. (not big on adding modules, but it's best to use battle-tested security/validation code.)
Downloading and checking with file-type seems excessive and will cause performance issues.
If lying servers become an issue in the future we can rectify it then.
Serverside media check added:
23df4f88f9