Signed-off-by: eternal-flame-AD <yume@yumechi.jp>
This commit is contained in:
ゆめ 2024-11-23 15:52:09 -06:00
parent 2e12350abc
commit aff0fec58f
No known key found for this signature in database

View file

@ -27,7 +27,7 @@ Currently to do:
This project is designed to match the upstream [specification](https://github.com/misskey-dev/media-proxy/blob/master/SPECIFICATION.md), however a few deviations are made: This project is designed to match the upstream [specification](https://github.com/misskey-dev/media-proxy/blob/master/SPECIFICATION.md), however a few deviations are made:
- We will not honor remote `Content-Disposition` headers but instead reply with the actual filename in the request URL. - We will not honor remote `Content-Disposition` headers but instead reply with the actual filename in the request URL.
- Remote `Content-Type` headers will only be used as a hint rather than authoritative, and resniffing is unconditionally performed. - Remote `Content-Type` headers will only be used as a hint rather than authoritative, and resniffing is unconditionally performed using the `file` utility database using purely masked signature matching.
- SVG rasterization is removed from the proxy in favor of sanitization and CSP enforcement. - SVG rasterization is removed from the proxy in favor of sanitization and CSP enforcement.
## Demo ## Demo