Level 54
Nov 10, 2021
7
Level 5
Receiving images with mimetype application/octet-stream
Hi guys,
I have a new challenge. So I am receiving images from a mobile app. On some android devices when it is uploaded from the camera directly, I get the mimetype application/octet-stream.
This mimetype can basically be anything.
I read on stackoverflow that "getimagesize" is a reasonable safe way to determine if the uploaded file is really an image.
But somehow this "feels wrong". Has anyone stumbled upon a similiar issue?
Level 5
@siangboon this is what I do now. Basically this is the problem.
Level 54
@ChristophAust perhaps showing the code, expected result, error and debug result will help others to understand your problem better...
Level 5
@siangboon sorry, I guess you are right. So what I am doing is checking an image against the mimetypes jpeg and png. When it is sent from a native app using the camera the mimetype sometimes is application/octet-stream. I do not really feel good with simply adding it to the accepted mimetypes since it can be basically anything.
So I am looking for a way to securely check if it is an image or not.
Level 102
@ChristophAust A trick would be to use dimensions validation.. It is the same as your own first post, but you let laravel handle it for you
https://laravel.com/docs/8.x/validation#rule-dimensions
If the file has no dimensions or isnt an image file, it will fail the validation automatically
Level 5
@Sinnbeck good catch! This is considered a safe check whether the file is an image? You know by chance? Otherwise I would dig into the source code and check.
Level 102
@ChristophAust Yeah it checks quite a few things https://github.com/laravel/framework/blob/8.x/src/Illuminate/Validation/Concerns/ValidatesAttributes.php#L527
1 like
Please or to participate in this conversation.