Go to file
Oliver Falk d37ae1456c feat: implement comprehensive file upload security
- Add comprehensive file validation with magic bytes, MIME type, and PIL checks
- Implement malicious content detection and polyglot attack prevention
- Add EXIF data sanitization to prevent metadata leaks
- Enhance UploadPhotoForm with security validation
- Add security logging for audit trails
- Include comprehensive test suite for security features
- Add python-magic dependency for MIME type detection
- Update configuration with security settings
- Add detailed documentation for file upload security

Security features:
- File type validation (magic bytes + MIME type)
- Content security scanning (malware detection)
- EXIF data sanitization (privacy protection)
- Enhanced logging (security event tracking)
- Comprehensive test coverage

Removed rate limiting as requested for better user experience.
2025-10-15 15:30:32 +02:00
2023-01-02 22:42:26 +01:00
2023-05-15 18:58:22 +00:00
2023-02-14 21:43:16 +01:00
2025-02-10 16:54:28 +01:00
2025-09-24 17:44:41 +02:00
2018-07-11 10:09:28 +02:00
2018-11-06 13:38:09 +01:00
2025-09-11 14:18:41 +02:00
2022-02-11 13:17:22 +01:00
2022-02-11 13:16:52 +01:00
2025-09-11 14:18:41 +02:00

ivatar / libravatar

Pipeline and coverage status

pipeline status coverage report

Reports / code documentation

Authors and contributors

Lead developer/Owner: Oliver Falk (aka ofalk or falko) - https://git.linux-kernel.at/oliver

Operations: Michal Novotny (aka clime)

QA: Tristan Le Guern (aka tleguern)

Frontend developer: Lukas Schönsgibl (aka hybridpicker), Niklas Poslovski (aka nipos)

Organisation/Meeting moderation: Lars Kruse (aka sumpfralle)

Initial developer: François Marier - https://fmarier.org/

Description
No description provided
Readme AGPL-3.0 32 MiB
Languages
PostScript 94.5%
Python 3.8%
CSS 0.7%
HTML 0.7%
JavaScript 0.3%