allReady icon indicating copy to clipboard operation
allReady copied to clipboard

Create Event - Image Upload Limits

Open stevejgordon opened this issue 7 years ago • 5 comments

When logged in as a site admin, organization admin or campaign manager, the user can create new events in allReady.

As per #2219

Currently there is an image upload option but we do not limit the size of the upload or scale the uploaded image. This may lead to unneccesarily large images being uploaded and affecting page load times.

We should do at least one of the following:

Limit the max dimension on the long edge for the image and/or the filesize Ideally, scale the image or provide a client side image cropper and resizer before uploading the image. We should also ensure that we only allow image file types to be uploaded. Currently it seems that any file can be chosen and will upload. This could present a security risk!

stevejgordon avatar Jan 15 '18 18:01 stevejgordon

Reserved for .NET South East codeathon

stevejgordon avatar Jan 15 '18 18:01 stevejgordon

I'll take a look at this one.

Paul-Hadfield avatar Jan 20 '18 09:01 Paul-Hadfield

Regarding last comment, the code base for creating and editing events does restrict down to jpg, png, gif.

screen shot 2018-01-20 at 10 27 08

Paul-Hadfield avatar Jan 20 '18 10:01 Paul-Hadfield

@stevejgordon Limiting on file size is a quick fix for this one, is there a project standard for where to put these values. Web.config good enough? Allow size to be specified in MB, or KB good enough?

Paul-Hadfield avatar Jan 20 '18 10:01 Paul-Hadfield

This also looks like it might be done @stevejgordon and @MisterJames

stimms avatar Mar 06 '18 22:03 stimms