Comment #3 on issue 20306 by [email protected]: SafeBrowsing flags sites  
that only include images (even 404s)
http://code.google.com/p/chromium/issues/detail?id=20306

To further elaborate, how do you know that it's actually an image, and what  
type of
image? For this, we actually read the image and try to parse it to  
determine the
filetype (is it really a jpeg? or is it a gif with an improper mime type?)

Good image hosters will actually re-encode the image, to prevent someone  
from
uploading something improper.

I understand this can be frustrating, but the sad reality is that when you  
allow
content from a third party on your website, there's a risk, it's been  
exploited in
the past and continues to be exploited today :(

--
You received this message because you are listed in the owner
or CC fields of this issue, or because you starred this issue.
You may adjust your issue notification preferences at:
http://code.google.com/hosting/settings

--~--~---------~--~----~------------~-------~--~----~
Automated mail from issue updates at http://crbug.com/
Subscription options: http://groups.google.com/group/chromium-bugs
-~----------~----~----~----~------~----~------~--~---

Reply via email to