Security

Upload validation

We never trust a file's extension or reported MIME type. Every upload is sniffed by its actual byte signature to determine the real format, and unsupported files are rejected before any processing.

Resource limits

• Per-file size limit (default 25 MB) to prevent runaway memory use.
• Total pixel-count limit (default 40 megapixels) to guard against decompression bombs.
• Batch count limit (default 20 files) with a bounded processing queue.

SVG handling

SVG files can contain scripts and external references. Before rasterising an SVG we remove <script> and other active elements, strip event-handler attributes, and drop external URL references — so nothing executes and no remote resource is fetched.

Memory hygiene

Object URLs, ImageBitmaps and canvases are released when a file is removed or the page is closed, and workers are terminated on unload. Images are never written to persistent storage.

Reporting a vulnerability

If you discover a security issue, please email [email protected] with details and steps to reproduce. Please give us a reasonable opportunity to address it before public disclosure.