Comments (3)
bscott
commented on May 18, 2024
Created a first pass pull request #22
from imgproxy.
homm
commented on May 18, 2024
Copy here to not lose:
I don't know VIPS internals but for some libraries, this does sense, because too tall or too wide images (for example 1x15000000) can have some overhead in processing and this could be used as a vulnerability.
I suggest setting the max resolution to some suitable value, like 15M and set the max dimension to a high, but realistic value like 16K or 32K.
from imgproxy.
DarthSim
commented on May 18, 2024
Here it comes! 2940478
I increased default max dimension to 8192^ and added max resolution config which is 16.8 by default.
from imgproxy.
Related Issues (20)
- Documentation does not mention that presets should be used with a `preset:` prefix in the Presets Guide HOT 1
- SVG source format doesn't work with WEBP_DETECTION and AVIF_DETECTION HOT 2
- Only first 10 parameters are pulled from AWS parameter store HOT 3
- Support deploying to Deta Space HOT 4
- Allow original image if new content-length is larger than origin content length HOT 8
- Feature request: send more data to Sentry HOT 1
- Resize images HOT 4
- Publish docker images to github container registry (ghcr.io) HOT 4
- Inconsistent status code HOT 4
- 3.23.0 causes S3 errors (works in 3.22.0) HOT 3
- Exif too large HOT 6
- Asking for Help: Nginx Configuration for Rewrites HOT 2
- Extract 9:16 thumbs from video & using VTT seems to lose the resize HOT 12
- ICO files failing with "Cant load from ICO" error HOT 7
- Base64 encoding of local url doesn't work HOT 1
- Resizing with "fit" mode leads to blurry images in some cases HOT 2
- invalid TIFF format: image dimensions are not specified HOT 6
- Support EPS files HOT 1
- "is not a video" error when trying to source PSD file HOT 2
- How to get width and height of original img? HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from imgproxy.