Skip to content
/ imgproxy Public
forked from imgproxy/imgproxy

Fast and secure standalone server for resizing and converting remote images

License

Notifications You must be signed in to change notification settings

pushd/imgproxy

This branch is 152 commits ahead of, 305 commits behind imgproxy/imgproxy:master.

Folders and files

NameName
Last commit message
Last commit date

Latest commit

fd455f1 · Oct 14, 2024
Aug 11, 2023
May 13, 2023
Mar 10, 2023
Jun 12, 2023
Sep 30, 2021
Oct 10, 2024
Nov 11, 2021
Oct 10, 2024
Aug 20, 2023
Sep 30, 2021
Oct 28, 2022
Aug 3, 2023
Aug 30, 2023
Jun 18, 2019
Sep 7, 2022
Nov 1, 2021
Aug 15, 2023
Oct 11, 2024
Oct 3, 2022
Apr 16, 2023
May 3, 2023
Nov 5, 2022
Nov 15, 2021
Aug 15, 2023
Aug 9, 2024
Aug 9, 2024
Oct 10, 2024
Aug 25, 2023
Aug 1, 2023
Mar 22, 2023
Jul 20, 2022
Sep 29, 2021
Jul 4, 2023
Jul 4, 2023
Aug 15, 2023
Oct 12, 2023
Aug 21, 2023
Mar 20, 2024
Aug 30, 2023
Feb 11, 2022
Sep 15, 2022
Feb 1, 2024
May 7, 2021
Nov 20, 2020
Aug 30, 2023
Jun 20, 2017
May 17, 2023
Aug 31, 2023
Feb 24, 2023
Jun 18, 2019
Feb 16, 2022
Nov 15, 2021
Feb 15, 2022
Sep 15, 2022
Oct 12, 2023
Oct 12, 2023
May 17, 2023
Jun 18, 2019
Feb 24, 2023
Jul 2, 2023
Aug 20, 2019
Oct 14, 2024
Feb 16, 2022
Nov 15, 2021
Oct 12, 2023
Jul 4, 2023
May 6, 2022
Oct 18, 2023
Oct 14, 2024
Aug 31, 2023
May 3, 2023

Repository files navigation

imgproxy logo

GH Test GH Lint Docker Pulls


imgproxy is a fast and secure standalone server for resizing and converting remote images. The guiding principles behind imgproxy are security, speed, and simplicity.

imgproxy is able to quickly and easily resize images on the fly, and it's well-equipped to handle a large amount of image resizing. imgproxy is a fast, secure replacement for all the image resizing code inside your web application (such as resizing libraries, or code that calls ImageMagick or GraphicsMagic). It's also an indispensable tool for processing images from a remote source. With imgproxy, you don’t need to repeatedly prepare images to fit your design every time it changes.

To get an even better introduction, and to dive deeper into the nitty gritty details, check out this article: imgproxy: Resize your images instantly and securely

Sponsored by Evil Martians

Simplicity

"No code is better than no code."

imgproxy only includes the must-have features for image processing, fine-tuning and security. Specifically,

  • It would be great to be able to rotate, flip and apply masks to images, but in most of the cases, it is possible — and is much easier — to do that using CSS3.
  • It may be great to have built-in HTTP caching of some kind, but it is way better to use a Content-Delivery Network or a caching proxy server for this, as you will have to do this sooner or later in the production environment.
  • It might be useful to have everything built in — such as HTTPS support — but an easy way to solve that would be just to use a proxying HTTP server such as nginx.

Speed

imgproxy takes advantage of probably the most efficient image processing library out there – libvips. It’s scary fast and comes with a very low memory footprint. Thanks to libvips, we can readily and extemporaneously process a massive amount of images.

imgproxy uses Go’s raw (no wrappers) native net/http package to omit any overhead while processing requests and provides the best possible HTTP support.

You can take a look at some benchmarking results and compare imgproxy with some well-known alternatives in our benchmark report.

Security

In terms of security, the massive processing of remote images is a potentially dangerous endeavor. There are a number of possible attack vectors, so it’s a good idea to take an approach that considers attack prevention measures as a priority. Here’s how imgproxy does this:

  • imgproxy checks the image type and its “real” dimensions when downloading. The image will not be fully downloaded if it has an unknown format or if the dimensions are too big (you can set the max allowed dimensions). This is how imgproxy protects from so called "image bombs”, like those described in this doc.

  • imgproxy protects image URLs with a signature, so an attacker cannot enact a denial-of-service attack by requesting multiple image resizes.

  • imgproxy supports authorization by HTTP header. This prevents imgproxy from being used directly by an attacker, but allows it to be used via a CDN or a caching server — simply by adding a header to a proxy or CDN config.

Usage

Check out our 📑 Documentation.

Author

Sergey "DarthSim" Alexandrovich

Special thanks

Many thanks to:

License

imgproxy is licensed under the MIT license.

See LICENSE for the full license text.

Security Contact

To report a security vulnerability, please use the Tidelift security contact. Tidelift will coordinate the fix and disclosure.

Building

build -t <tag you want> -f docker/Dockerfile .

About

Fast and secure standalone server for resizing and converting remote images

Resources

License

Security policy

Stars

Watchers

Forks

Packages

No packages published

Languages

  • Go 91.5%
  • C 5.9%
  • Shell 1.7%
  • Other 0.9%