Skip to content

Require metadata filtering before pass-through - #18

Merged
smnandre merged 2 commits into
altophp:mainfrom
smnandre:security/metadata-stripping
Sep 27, 2026
Merged

smnandre merged 2 commits into
altophp:mainfrom
smnandre:security/metadata-stripping

Conversation

@smnandre

Copy link
Copy Markdown
Contributor

Unchanged same-format images could retain private tags located beyond the bounded header probe, even with Strip or the default ColourProfile policy.

Require metadata filtering to go through the encoder. Explicit Keep still permits byte-for-byte copies. Document the re-encoding implications for lossy formats, ICC profiles, and GD animations.

@smnandre
smnandre merged commit 989810b into altophp:main Sep 27, 2026
9 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant