Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Glide server without secure #101

Closed
lotarbo opened this issue Feb 6, 2023 · 4 comments
Closed

Glide server without secure #101

lotarbo opened this issue Feb 6, 2023 · 4 comments

Comments

@lotarbo
Copy link
Contributor

lotarbo commented Feb 6, 2023

Hello, right now by default, everyone can spoof glide server with mass image transformation.
I think better add signature to glide server https://glide.thephpleague.com/1.0/config/security/
@awcodes
Copy link
Owner

awcodes commented Feb 6, 2023

You are free to provide your own implementation of Glide server via Curator's global settings.

->glideServer(Server|ServerFactory)

@lotarbo
Copy link
Contributor Author

lotarbo commented Feb 6, 2023

@awcodes i think it's related to MediaController we need to check signature in show method

@awcodes
Copy link
Owner

awcodes commented Feb 6, 2023

Yep, you're right. I'll see what I can do. thanks.

@awcodes
Copy link
Owner

awcodes commented Feb 8, 2023

Thanks for bringing this to my attention. It's been added to v2.1.0.

@awcodes awcodes closed this as completed Feb 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@lotarbo @awcodes