Code52/Ideastrike — Issue #74: width in the /idea/imagethumb/{id}/{width} URL isn't sanitised
Author: ianoxley
Created: 2012-02-03 16:05:25+00:00
State: open

This means it's possible to request an image with something like /idea/imagethumb/1/1000000, which can cause an OutOfMemoryException.

Adding a check against a maximum allowed width is straight forwards enough, but where should the max allowed value be stored? e.g. as a constant in Model/Image.cs? or Modules/IdeaModule.cs? or should it be made configurable via /admin/settings?