Skip to content

Harden ebook cover decoding - #9

Merged
dlpwaters merged 1 commit into
mainfrom
fix/bounded-cover-decoding
Aug 22, 2026
Merged

dlpwaters merged 1 commit into
mainfrom
fix/bounded-cover-decoding

Conversation

@dlpwaters

Copy link
Copy Markdown
Owner

Summary

  • reject oversized, unsupported, or excessive-dimension EPUB and sidecar covers before decode
  • re-encode accepted covers as verified 512x768 PNG thumbnails in a resource-limited ImageMagick subprocess
  • add QML source-size bounds and invalidate legacy cover-cache records
  • document the security boundary and ImageMagick dependency

Verification

  • 17 Python tests pass, including oversized archive and sidecar regressions
  • all four bundled starter EPUBs produce verified 512x768 PNG covers
  • omarchy plugin validate .
  • Python, JavaScript, JSON, and QML static checks

@dlpwaters
dlpwaters merged commit 0cc223e into main Aug 22, 2026
2 checks passed
@dlpwaters
dlpwaters deleted the fix/bounded-cover-decoding branch August 22, 2026 12:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant