Skip to content

feat: enforce 500KB size limit on raw image buffer ingestion #28

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
REX-codebase merged 1 commit into from
Jul 18, 2026
Merged

feat: enforce 500KB size limit on raw image buffer ingestion #28

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions skills/utils/image-analyzer.js
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,10 @@ const zlib = require('zlib');
* Zero external dependencies. Fully standard PNG unfiltering compliance.
*/
function parsePNG(buffer) {
if (buffer.length > 512000) {
throw new Error('Image buffer exceeds the 500KB performance budget.');
}

// Check standard PNG signature: 89 50 4E 47 0D 0A 1A 0A
if (buffer.readUInt32BE(0) !== 0x89504E47 || buffer.readUInt32BE(4) !== 0x0D0A1A0A) {
throw new Error('Invalid PNG signature.');
Expand Down