Harden express-processimage for use in production
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 35/100
- Issue type
- Feature
- Clarity
- Mostly clear
- Activity status
- Stale
- Tech stack
- express, javascript
Research direction
Start by tracing the middleware's GET-parameter handling and the paths that invoke command-line image tools. Define completion as rejecting unsafe parameters, allowing filters and operations to be disabled, and enforcing configurable input and output pixel limits; verify behavior with the existing project checks, though no specific files or tests are named.
Written by the indexing model from the issue text.
Description
- Validate the GET parameters so we don't pass arbitrary data to command line programs
- Make it possible to disable certain filters and operations so things like
inkscapeandsvgfilterdon't have to be exposed in cases where they aren't needed - Add a configurable max resolution of input and output images to prevent DOSing the server by eg. scaling an icon to 100000x100000 pixels. Sort of like
gm -limit Pixels <numberOfPixels>.
- Dominant language
- JavaScript
- Stars
- 55
- Forks
- 18
- PR merge metrics
- No merged PRs in 30d
Getting set up
- Ships a Dockerfile or Docker Compose file
- No pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from papandreou/express-processimage
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
papandreou/express-processimage#50 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 45/100
papandreou/express-processimage#25 · 4 comments ·
-
Difficulty 5/5 Over a week Newbie friendliness 35/100
papandreou/express-processimage#22 · 1 comment ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
papandreou/express-processimage#17 · 3 comments ·
-
Difficulty 4/5 3-5 days Newbie friendliness 25/100
papandreou/express-processimage#14 · 3 comments ·
All issues in papandreou/express-processimage
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 76/100
keyxmakerx/Chronicle#1469 ·
Maintainers usually reply within 1 day
-
enhancement good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 83/100
suradet-ps/codeframe#40 ·
Maintainers usually reply within 1 day
-
data
Difficulty 1/5 Under an hour Newbie friendliness 74/100
gaseous-project/hasheous#637 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
gramps-project/gramps-web#1549 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100