Improve security of image filenames
ausi opened this issue · 4 comments
ausi commented
The paths for resized versions of private images should not be guessable for security reasons.
ausi commented
Idea for better backwards compatibility:
Still calculate the old hash, and if the resized image already exists with the old name, return it. But if it does not exist, create a new image with the new hash algorithm instead.
leofeyer commented
Do we need backwards compatibility? We could also ask the users to rebuild their cache.
ausi commented
We could also ask the users to rebuild their cache.
This can be a very huge number of images that have to be regenerated. If the backwards compatibililty can be achieved without too much effort I would favor it.