News for hackers. Stuff that matters.

A comment on Ask HN: How to handle user file uploads?. Parent comment

Re:Ask HN: How to handle user file uploads? by dividuum on Saturday May 04, 2024 @08:32AM (#40257169)
Is using ClamAv because of some compliance checklist that forces you to include a virus scanner in there? Otherwise I don’t see how adding a ton of additional complexity with a proven track record of CVEs would add any security at all.
[ Parent | on HN ]
Re:Ask HN: How to handle user file uploads? by cebert on Saturday May 04, 2024 @11:26AM (#40258353)
No compliance reason other than adding it in couldn’t hurt.
[ Parent | on HN ]
Re:Ask HN: How to handle user file uploads? by robertlagrant on Saturday May 04, 2024 @12:27PM (#40258678)
How does

> a ton of additional complexity with a proven track record of CVEs

become:

> adding it in couldn’t hurt

?

[ Parent | on HN ]
Re:Ask HN: How to handle user file uploads? by matja on Saturday May 04, 2024 @02:15PM (#40259313)
By running it in an ephemeral container with no network access for each file you want to check?
[ Parent | on HN ]