External image vulnerabilities

后端 未结 3 1755
小蘑菇
小蘑菇 2020-12-19 09:33

What security holes can appear on my site by including external images via img tag and how to avoid them?

I\'m currently only checking the extension an

3条回答
  •  粉色の甜心
    2020-12-19 10:02

    The primary holes that can be exposed are those where corrupted images cause buffer overflows within the browser, allowing arbitrary code execution.

    If you're only putting the images into an tag there shoudln't be any vulnerabilities relating to sending alternative MIME types, but never underestimate the stupidity of some web browser developers...

提交回复
热议问题