From 80b2bd2d145b17eb0e12f8450a27fbb29dad1ade Mon Sep 17 00:00:00 2001 From: eternal-flame-AD Date: Sat, 23 Nov 2024 14:46:11 -0600 Subject: [PATCH] Update spec compliance info Signed-off-by: eternal-flame-AD --- README.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/README.md b/README.md index c19b73e..63cd98a 100644 --- a/README.md +++ b/README.md @@ -24,6 +24,14 @@ Currently to do: - [X] Sandboxing the image rendering - [X] Prometheus-format metrics +## Spec Compliance + +This project is designed to match the upstream [specification](https://github.com/misskey-dev/media-proxy/blob/master/SPECIFICATION.md), however a few deviations are made: + +- We will not honor remote `Content-Disposition` headers but instead reply with the actual filename in the request URL. +- Remote `Content-Type` headers will only be used as a hint rather than authoritative, and resniffing is unconditionally performed. +- SVG rasterization is planned to be removed from the proxy in favor of sanitization and CSP enforcement. + ## Demo ### Avatar resizing