Confirmed users
491
edits
WebAppSec/Secure Coding Guidelines: Difference between revisions
Jump to navigation
Jump to search
WebAppSec/Secure Coding Guidelines (view source)
Revision as of 23:59, 31 January 2011
, 31 January 2011→Image Upload
| Line 332: | Line 332: | ||
'''Upload Verification''' | '''Upload Verification''' | ||
*Use image rewriting libraries to verify the image is valid and to strip away extraneous content. | *Use image rewriting libraries to verify the image is valid and to strip away extraneous content. | ||
*Set the extension of the stored image to be a valid image extension based on the detected content type of the image from image processing (e.g. do not just trust the header from the upload). | *Set the extension of the stored image to be a valid image extension based on the detected content type of the image from image processing (e.g. do not just trust the header from the upload). | ||