4 ms·
Yeah, I've come across sites that allow arbitrary resizing via dimension numbers in the URL. Seems like it would be easy to CPU ddos by submitting random number
by rhizome 5y ago
Yeah, I've come across sites that allow arbitrary resizing via dimension numbers in the URL. Seems like it would be easy to CPU ddos by submitting random numbers in those fields.
- magicalhippo 5y agoAnd it's fairly easy to "snap" to the nearest available size variant. That way one can add cached variants after-the-fact.
- Aeolun 5y agoYou could do the same by requesting any dynamic page many times. Adding a rate limit to image resizing is no harder than adding it to any other URL.