#810: Quire Feedback
Status: Completed

I just noticed that somebody else's image upload failed:

#{Quire_Feedbacks/717} 3D Touch shortcuts

But how are you handling that? WHY did it happen and how can it be removed? Seems like that should NEVER happen - either the upload is successful and the app will display the thumbnail and be able to then open a popup with the image, OR the incomplete/broken image should not be attached.

Created by Alexander Rendar Mar 5, 2018

Sounds good, just keep in mind that hackers often take advantage of file attachments including the ways that I mentioned above.

Alexander Rendar, Mar 7, 2018

Hi Alex, This happened because before, when users want to attach a file, we would add it to task and at the same time, upload it to AWS S3 server. The upload would rarely fail but if it did, as the server might not be stable, it would led to the attachment being broken. Users could simply remove the broken attachment (clicking on the “x” icon) and reupload it. We have enhanced the way we handle attachment so that it will be added to the task after it has been successfully uploaded to the server. But if it happens again, please let us know. 😃

Crystal, Mar 7, 2018

Keep in mind that some users (me) will try to break the app by uploading a 1,000 Gigabyte image, or an image with a SQL injected code (or Cross-site Scripting code - XSS) in its filename. Also, SVG images can contain executable scripts - be careful. 👊

Alexander Rendar, Mar 7, 2018

⭐️ We have closed your thread in order to optimize the performance of the Quire Feedback Forum. Please see our Quire Feedback Official Guideline for more information.

If the request/feedback wasn’t answered, please leave a comment below, the Quire team will be notified. Thank you.

Peggy, Jun 24, 2021