5 ms·

But in this case it's luckily not vulnerable

• TonyTrapp 4y ago
  Apparently Discord and probably other platforms don't remove the excess data at the end of the file. Maybe they will start doing that now. But for all the existing cropped screenshots out there, it definitely means that there is a vulnerability.
  • shawnz 4y ago
    Does the system clipboard API also preserve the excess data, though?
    • banana_giraffe 4y ago
      Nope, or at least, not through any obvious paths I've ever seen, including testing just now. Also, both discord and imgur trimmed an image I uploaded to just the image data. Slack did not, however. I certainly wouldn't want to rely on that behavior, though.
  • saagarjha 4y ago
    They’ve started doing this.