tdpeuter/open-webui
tdpeuter/open-webui
1
Fork 0
forked from open-webui/open-webui
Code Issues Pull requests 1 Projects 1 Releases 2 Packages 1 Activity Actions

Introduce canvasPixelTest() intended to validate canvas functionality

Browse source 
Browsers and plugins that spoof canvas data produce corrupt images. In attempt to mitigate:

* Add canvasPixelTest() to test a single pixel and test the RGB values
* Test canvasPixelTest() inside generateInitialsImage() and use default `/user.png` if failure detected
* Call canvasPixelTest() directly within settings to avoid setting an invalid image
* Use toast.error() with 10 second autoClose
This commit is contained in:
Self Denial 2024-04-05 16:04:00 -06:00
parent c8f7bb990c
commit ac9308dbed
3 changed files with 55 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

10
src/lib/components/chat/Settings/Account.svelte
View file

@ -6,7 +6,7 @@
import { updateUserProfile } from '$lib/apis/auths';
import UpdatePassword from './Account/UpdatePassword.svelte';
import { generateInitialsImage } from '$lib/utils';
import { generateInitialsImage, canvasPixelTest } from '$lib/utils';
import { copyToClipboard } from '$lib/utils';
const i18n = getContext('i18n');
@ -148,7 +148,13 @@
<button
class=" text-xs text-gray-600"
on:click={async () => {
profileImageUrl = generateInitialsImage(name);
if (canvasPixelTest()) {
profileImageUrl = generateInitialsImage(name);
} else {
toast.error("Canvas pixel test failed, fingerprint evasion likely. Disable fingerprint evasion and try again!", {
autoClose: 1000 * 10,
});
}
}}>{$i18n.t('Use Gravatar')}</button
>
</div>