Add image-gen module: Spring AI ImageModel options on the wire, a moderation gate, and safe storage of generated images in MinIO (sniffed content type, byte and pixel caps, server-chosen keys, capped URL fetcher); per-provider cost table dated 2026-10-28. ImageModel and ModerationModel are hand-written fakes; MinIO is real via Testcontainers; no image provider called.
Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_017ic4b7rnC7jppGGdHGESvy
This commit is contained in:
@@ -0,0 +1,7 @@
|
||||
# Sniff + decode does not catch bytes after the image
|
||||
|
||||
input : valid 16x16 PNG followed by 25 bytes of <script>
|
||||
ImageVerifier : ACCEPT (image/png)
|
||||
why it is still OK: the object is stored as Content-Type image/png with
|
||||
Content-Disposition: attachment, so a browser will not run it as HTML.
|
||||
The check is the header, not the sniffing.
|
||||
Reference in New Issue
Block a user