fuzz/image-resizer

Image Resizing micro service.

Fuzz Image Resizer

A lightweight PHP image resizer, _(*1)

Out of the box usage

1. Run composer install
2. Set up environment variables
3. Resize your images

Setup

The image resizer is intended to live as a standalone microservice behind a CDN. The first request for a query combination http://resizer-url.com/resize/?source=http://image-source.com/images/image.jpg&height=300&width=400 will fall through to the resizer instance but any subsequent requests should be cached by the CDN., _(*2)

Environment Variables

The resizer depends on a few configurable environment variables (can be loaded from a dotenv file): * ALLOWED_HOSTS - a comma separated string of whitelisted domains * CACHE_EXPIRATION_HOURS - length (in hours) to set Cache-Control with the max-age directive and Expires headers. Any CDN should obey your cache rules and cache objects appropriately. * APP_ENV - app environment, _(*3)

Best Practices

In light of exploits like https://imagetragick.com/, we recommend that your implementation:, _(*4)

1. Uses the latest version of ImageMagick
2. Follows mitigation procedures listed on https://imagetragick.com/
3. Has severely restricted access to any other resources (on the same network or otherwise)
4. Only processes images from sources you whitelist

Healthcheck

healthcheck.php will return a 200 for Load Balancer health pings., _(*5)

Tests

Run phpunit, _(*6)