Hacker News new | ask | show | jobs
by philipcristiano 4755 days ago
Thanks for posting that. I haven't seen that one in a while but built a few. I'd recommend if anyone uses it to not expose it directly to the internet, once someone malicious sees all the sizes in the URL they may try hitting 1..n X 1..M which is a big hard on the servers.

We used specifically named sizes to avoid that problem although whitelisting in the edge servers would also work.