[amluto]

It takes some effort to implement, but Google has WUFFS for almost exactly this purpose:

https://github.com/google/wuffs

[rwmj]

Yes this is pretty great actually.