CODEWITHSUNDEEP
c#asp.net-mvcc#-4.0asp.net-mvc-4base64
Andy
Andy

Reputation: 1090

Validate Base64 Image in ASP.Net / C#

I'm building an ASP.Net mvc4 application that allows the user to send an image encoded as a Base64 string via a POST request. How to validate the user input to ensure that the base64 string is indeed an image and prevent the user from passing malicious data in the POST request? e.g. to prevent external URLs from being injected.

I found this and this which tells to do it in PHP but not Asp.net/C#.

Upvotes: 2

Views: 3344

Answers (2)

Matt
Matt

Reputation: 2886

Have you thought of decorating your post method with

[ValidateAntiForgeryToken]

Upvotes: -4

Andy T
Andy T

Reputation: 9881

I would follow the same approach in the PHP example and basically try to create an image from the base64 encoded data. If the data is not a valid image, I would expect that the image would throw an exception or at the very least, be null.

Doing a quick search, I found an example here on SO that shows several methods to create an image from a base64 encoded string.

Assuming ms is of type MemoryStream, I would suspect that you could wrap either one of these methods with a try/catch:

new Bitmap(ms)

or

mage.FromStream(ms);

Upvotes: 5

Related Questions