contao/image

Improve security of image filenames

ausi opened this issue · 4 comments

ausi commented

The paths for resized versions of private images should not be guessable for security reasons.

See contao/contao@9c517c7 (#3848)

ausi commented

Idea for better backwards compatibility:

Still calculate the old hash, and if the resized image already exists with the old name, return it. But if it does not exist, create a new image with the new hash algorithm instead.

Do we need backwards compatibility? We could also ask the users to rebuild their cache.

ausi commented

We could also ask the users to rebuild their cache.

This can be a very huge number of images that have to be regenerated. If the backwards compatibililty can be achieved without too much effort I would favor it.

ausi commented

Closed in favor of #90