>>105080302
it is easy enough to isolate potentially problematic calls like "getimagesize" (you know PHP code for parsing SWF is unmaintained because nobody uses SWF anymore).
here's how you do it:
>get a separate server (or a VM, or a cloudflare worker)
>on this server provide *one* REST endpoint that takes SWF input and gives getimagesize() output
>this isolation should be enough but if you are truly paranoid, isolate and sandbox the worker process
>have your checks call the REST API on isolated server. sanitize and don't trust it's result
>your main code is now completely safe from SWF exploits
that's it. just basic sandboxing/privsep

Back | Go to board

Board:

/g/

Thread:

Is there any way to save /f/, /g/?