image upload with security related issue

Question

I have a service where users can upload images (in the form of base64-encoded string) to the server and the server will convert the string to an image file and upload it to the AWS.

What if the base64-encoded string is a malware or virus in disguise?

Answer 1

That is a valid concern. One way to deal with this is to run an up-to-date malware detection on the decoded file before making it public. If it fails, don't allow it to be seen by anyone. Check out clamav for one such option.