Description
Problem
AgendaItemsCreateModal.tsx currently uses Base64 encoding for storing images, leading to increased payload size, performance issues, and inefficient storage.
Solution
Integrate MinIO client for image uploads. Instead of storing Base64 strings, upload images to MinIO and save only the file URL in the database.
Alternatives Considered
- Local filesystem storage (scalability concerns).
- AWS S3 (MinIO provides a self-hosted alternative).
Approach
- Remove Base64 encoding and implement MinIO uploads.
- Store MinIO file URLs instead of Base64 strings.
- Ensure proper error handling and security measures.
Additional Context
This change will enhance performance, reduce bandwidth usage, and optimize image storage.
NOTE
-
We recently discovered a flaw in the code base where there are some XSS and CORS vulnerabilities. This occurs when the API and Admin servers run on different machines.
-
You will notice this if you configure your Admin app on your local machine to use the API running on https://test.talawa.io/graphql.
-
The errors in your browser will look like this:
-
As part of this issue you will need to ensure that the browser only interacts with the API through the Admin server and never with the API direclty.
Metadata
Metadata
Assignees
Type
Projects
Status