FeatureFuel
6

Secure heic/heif image preview provider

Source: nextcloud/server#58393 · opened by @stubb
Secure heic/heif image preview provider: Using a managed nextcloud instance I realized there is no preview provider for heic/heif images enabled by default but was in the past. It was disabled by default because of security and performance concerns with this PullRequest

The implementation especially this code block could be used for server-side request forgery by providing malicious SVG file content in a .heic named file.

No pledges yet. Be the first to back this.

Make a pledge

Pledge your monetary support if this feature is added.

$

Comments

No comments yet.

Replying to

Add a comment

What do you think about this feature request?


Similar requests