3 ms·
If you are a big enough target, people will try to compromise your infrastructure or your users through these uploads. Some problems you can run in to: Exploit
by bagels 2y ago
If you are a big enough target, people will try to compromise your infrastructure or your users through these uploads.
Some problems you can run in to:
Exploiting image or video processing tools with crafted inputs, leading to server compromise when encoding/resizing.
Having you host illegal or objectionable material.
Causing extreme resource consumption, especially around video processing and storage.
Having you host material that in some way compromises your clients (exploits bugs in jpeg libraries, cross site scripting, etc.)
I can't really talk about what is done at the FAANG that I worked at on this stuff, but if you are a large enough target, this is a huge threat vector.