Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

protect from missuse #924

Closed
tasiotas opened this issue Jul 21, 2023 · 2 comments
Closed

protect from missuse #924

tasiotas opened this issue Jul 21, 2023 · 2 comments

Comments

@tasiotas
Copy link

Hi,

Have you thought about some protection from bad actors modifying url so that each request will trigger new transformation?
Its pretty easy to loop over few parameters in the url and get unique requests that caching wont catch.

Here is a good read, https://imagekit.io/blog/reduce-unauthorised-use-image-urls/

Hash sounds like a good idea. Include precomputed hash in the url, that will be checked for validity before performing transformation.

Thank you

@ausir0726
Copy link
Contributor

Regarding the issue of image abuse, you can track this ISSUE if the provider is the default 'ipx'.

unjs/ipx#45

@Baroshem
Copy link
Collaborator

Closing jn favor of #276

@Baroshem Baroshem closed this as not planned Won't fix, can't repro, duplicate, stale Dec 18, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants