Skip to content

fix(client_lib): force-derive thumbnail filename via timestamp#53

Open
jkaczman wants to merge 1 commit intomainfrom
fix-thumbnail-traversal
Open

fix(client_lib): force-derive thumbnail filename via timestamp#53
jkaczman wants to merge 1 commit intomainfrom
fix-thumbnail-traversal

Conversation

@jkaczman
Copy link
Copy Markdown
Collaborator

This stops trusting sender-controlled thumbnail filenames. Instead, the app derives thumbnail filenames from the timestamp using a fixed format.

@jkaczman jkaczman requested a review from arrdalan April 10, 2026 20:31
Copy link
Copy Markdown
Collaborator

@arrdalan arrdalan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems like we won't need the filename field in ThumbnailMetaInfo anymore. If this is the case, please go ahead and remove it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants