I'm curious which files I should be checking for on a typical image upload feature. This particular one I'm testing is for a profile picture.
Things I'm already checking for:
- Image file size (e.g. < 1MB)
- Image dimensions (e.g. 200x200 pixels or less)
- Image file extensions only (e.g. png/jpg/jpeg/gif etc)
- Image Mime types only (e.g.
Are there any other common things to check for with this? I feel like I might be forgetting to check for some important security issue. The file extension and mime types cover most issues I can think of.