Backblaze is now a Terraform provider

Re:Backblaze is now a Terraform provider by busymom0 on Thursday March 11, 2021 @07:43PM (#26430959)

A limitation I ran across when using B2 was that their pre-defined url generation doesn't allow you to set file-size limits nor does it allow you to set the file name in the pre-defined url. It simply gives you a url to upload it to. So if you are using b2 for storage for lets say image uploads from browser, some malicious user has the ability to modify the network request with whatever file name or file size they want. Next thing you know, you have a 5gb sized image uploads happening....

This pretty much prevents me from using B2 for now.

[ Parent | on HN ]

Re:Backblaze is now a Terraform provider by SmellTheGlove on Thursday March 11, 2021 @07:49PM (#26431002)

I ran into the same limitation! IIRC, there also wasn't a way to expire a signed upload URL sooner than whatever the default was, which was hours or maybe a day. I had the exact use case you mentioned, too - image uploads bypassing my backend server. I didn't want the generation of a signed url to, say, upload a profile photo, give carte blanche to create a hidden image host when combined with the limitation that you highlighted. All sorts of bad things could come of that. I ended up just going back to S3 - costs more, but still worth it.

[ Parent | on HN ]