3 ms·
I'm pretty sure ClamAv would add more vulnerabilities to your stack than it might prevent from being exploited.
by dividuum 2y ago
I'm pretty sure ClamAv would add more vulnerabilities to your stack than it might prevent from being exploited.
- junto 2y agoIt’s an old stack. Can you suggest an alternative self hosted option?
- dividuum 2y agoI consider the approach of using virus scanning inherently flawed: They rely on heuristics and rules to essentially create a blacklist. And they add a ton of complexity (more code -> usually more bugs) which is not something you want if you work with untrustworthy data. What you instead want is a whitelist: Only allow properly formatted images and videos and ruthlessly reject anything else. I wrote about how I implemented this for my service in another response.