Update spec compliance info

Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
This commit is contained in:
ゆめ 2024-11-23 14:46:11 -06:00
parent c603428975
commit 80b2bd2d14
No known key found for this signature in database

View file

@ -24,6 +24,14 @@ Currently to do:
- [X] Sandboxing the image rendering - [X] Sandboxing the image rendering
- [X] Prometheus-format metrics - [X] Prometheus-format metrics
## Spec Compliance
This project is designed to match the upstream [specification](https://github.com/misskey-dev/media-proxy/blob/master/SPECIFICATION.md), however a few deviations are made:
- We will not honor remote `Content-Disposition` headers but instead reply with the actual filename in the request URL.
- Remote `Content-Type` headers will only be used as a hint rather than authoritative, and resniffing is unconditionally performed.
- SVG rasterization is planned to be removed from the proxy in favor of sanitization and CSP enforcement.
## Demo ## Demo
### Avatar resizing ### Avatar resizing