3 ms·
Most of the time theses images don't end up in the file system. They are going to the clipboard and then copied to a chat or imgur
by malka 4y ago
Most of the time theses images don't end up in the file system. They are going to the clipboard and then copied to a chat or imgur
- e4e5 4y agoBut in this case it's luckily not vulnerable
- TonyTrapp 4y agoApparently Discord and probably other platforms don't remove the excess data at the end of the file. Maybe they will start doing that now. But for all the existing cropped screenshots out there, it definitely means that there is a vulnerability.
- shawnz 4y agoDoes the system clipboard API also preserve the excess data, though?
- banana_giraffe 4y agoNope, or at least, not through any obvious paths I've ever seen, including testing just now. Also, both discord and imgur trimmed an image I uploaded to just the image data. Slack did not, however. I certainly wouldn't want to rely on that behavior, though.
- saagarjha 4y agoThey’ve started doing this.