coinos-server.git/lib/upload.ts, branch mastercoinos server — legacy coinos.io backend (Lightning, on-chain, Liquid)https://git.coinos.io/coinos-server.git/atom?h=master2026-09-27T05:45:43Zupload: decode images in a throwaway child process and tighten input checks2026-09-27T05:45:43ZAdam Soltysadam@coinos.io2026-09-27T05:45:43Zurn:sha1:0912f443cc738af7dd7093670f00420de72a095f
Malformed HEIF uploads were corrupting the heap inside libvips/libheif and
taking the whole app down with them, since sharp ran in-process. Move the
decode into a per-upload child (lib/image-worker.ts, spawned by lib/image.ts
with a hard timeout) so a decoder crash fails one request instead of the
server, and never load sharp in the main process.
Also: only accept jpeg/png/webp/gif as sniffed by file-type instead of any
image/* subtype, decode with failOnError and a pixel cap, refuse uploads
from blacklisted accounts (a freeze previously only blocked sends), and
rate-limit uploads per account.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
picture not profile2025-01-01T00:52:14ZAdam Soltysadam@coinos.io2025-01-01T00:52:14Zurn:sha1:e2db9a0e0fad4cb107e1bb4fee32b0618f6bae26biome lint2024-10-31T16:34:42ZAdam Soltysadam@coinos.io2024-10-31T16:29:04Zurn:sha1:aa4cd39c943b67169def224e224bd07b815b70ecrm logs2024-10-12T05:37:32ZAdam Soltysasoltys@gmail.com2024-10-12T05:37:14Zurn:sha1:01a25a3d490d905b93e448b5a8d49545de304de7fix upload endpoint2024-09-06T23:18:53ZAdam Soltysasoltys@gmail.com2024-09-06T23:18:53Zurn:sha1:1d5aa728046adf6cd6ca11483909406ac7195d3btypescript2024-08-27T04:17:43ZAdam Soltysasoltys@gmail.com2024-08-27T04:17:43Zurn:sha1:fe62cadd6fb4a7e49f7d59401fc74ae0411e32a7