You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Problem
ChatRoom.tsx currently uses Base64 encoding for storing images and media, leading to high memory consumption and slower performance.
Solution
Implement MinIO client for direct file uploads, storing only the file URLs instead of Base64 strings.
Alternatives Considered
Keeping Base64 (inefficient for large files).
Using third-party cloud storage (MinIO offers a self-hosted solution).
Approach
Remove Base64 encoding logic.
Integrate MinIO file upload for media messages.
Store and retrieve file URLs efficiently.
Additional Context
This change will improve chat performance, reduce payload size, and optimize storage usage.
NOTE
We recently discovered a flaw in the code base where there are some XSS and CORS vulnerabilities. This occurs when the API and Admin servers run on different machines.
You will notice this if you configure your Admin app on your local machine to use the API running on https://test.talawa.io/graphql.
The errors in your browser will look like this:
As part of this issue you will need to ensure that the browser only interacts with the API through the Admin server and never with the API directly.
The text was updated successfully, but these errors were encountered:
palisadoes
changed the title
Feature Request: Replace Base64 Storage with MinIO Client in ChatRoom.tsx
NoMongo: Replace Base64 Storage with MinIO Client in ChatRoom.tsx
Feb 24, 2025
Hi @NishantSinghhhhh, I’d love to work on this issue! Since optimizing image storage with MinIO is a great improvement for performance and security, I’d be happy to implement the changes.
Problem
ChatRoom.tsx currently uses Base64 encoding for storing images and media, leading to high memory consumption and slower performance.
Solution
Implement MinIO client for direct file uploads, storing only the file URLs instead of Base64 strings.
Alternatives Considered
Approach
Additional Context
This change will improve chat performance, reduce payload size, and optimize storage usage.
NOTE
We recently discovered a flaw in the code base where there are some XSS and CORS vulnerabilities. This occurs when the API and Admin servers run on different machines.
You will notice this if you configure your Admin app on your local machine to use the API running on https://test.talawa.io/graphql.
The errors in your browser will look like this:
As part of this issue you will need to ensure that the browser only interacts with the API through the Admin server and never with the API directly.
The text was updated successfully, but these errors were encountered: