On: Issues with Cloudflare Images

[rhizome]

Yeah, I've come across sites that allow arbitrary resizing via dimension numbers in the URL. Seems like it would be easy to CPU ddos by submitting random numbers in those fields.

[magicalhippo → rhizome]

And it's fairly easy to "snap" to the nearest available size variant. That way one can add cached variants after-the-fact.

[Aeolun → rhizome]

You could do the same by requesting any dynamic page many times.

Adding a rate limit to image resizing is no harder than adding it to any other URL.