4 Commits

Include renames

Author	SHA1	Message	Date
Dominik Schmidt	7f687ea288	fix(thumbnails): bound declared image dimensions before decoding ... The imaging build decodes the full pixel buffer from the header-declared dimensions before the existing MaxInputWidth/MaxInputHeight guard runs, so a tiny crafted file whose header declares huge dimensions forces a multi-GB allocation and can OOM the worker. Read the header with DecodeConfig and reject oversized sources before the decode allocates, in both the imaging and vips builds, and thread the limit through the audio cover-art and geogebra decoders that decode a second attacker-controlled image.	2026-09-08 15:28:37 +02:00
Florian Schade	288e67cc39	chore: replace interface with any	2026-04-23 09:31:11 +02:00
Ralf Haferkamp	a9a5570050	feat(thumbnails): optional libvips based thumbnail generation ... Can be enabled by setting the 'enable_vips' tag on 'go build'	2024-10-17 14:05:27 +02:00
Ralf Haferkamp	358adc15dc	refactor(thumbnails): separate out 'kovidgoyal/imaging' dependencies ... Move code using the 'kovidgoyal/imaging' package to separate files to make it easier to create alternative implementations based on build tags.	2024-10-17 14:05:27 +02:00