Limit max value for resize `h` and `w` about pilbox HOT 2 CLOSED

Resolved in efe2cbe

from pilbox.

The most reliable way to avoid this is to require signed urls which can be enabled by specifying a client_key in your configuration. This will ensure that the requests to resize images are coming from trustworthy sources. Even with restricting the max width / height, you may still be vulnerable to a DDoS attack given how many permutations of width and height can exist. I'd also encourage you to run pilbox on separate servers in the event that they are targeted by a DDoS attack, it should not affect your other services.

That said, upscaling doesn't generally make sense, so will add some sensible defaults for max width and height.

from pilbox.