You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Problem
OrganizationModal.tsx currently stores images using Base64 encoding, leading to increased memory usage and slower performance.
Solution
Replace Base64 encoding with MinIO client for direct file uploads and store only file URLs.
Alternatives Considered
Keeping Base64 (causes larger payloads).
Using external cloud storage (MinIO provides a self-hosted alternative).
Approach
Remove Base64 encoding logic.
Implement MinIO upload for organization images.
Store and retrieve file URLs efficiently.
Additional Context
This update will optimize performance, reduce bandwidth usage, and improve data handling.
NOTE
We recently discovered a flaw in the code base where there are some XSS and CORS vulnerabilities. This occurs when the API and Admin servers run on different machines.
You will notice this if you configure your Admin app on your local machine to use the API running on https://test.talawa.io/graphql.
The errors in your browser will look like this:
As part of this issue you will need to ensure that the browser only interacts with the API through the Admin server and never with the API directly.
The text was updated successfully, but these errors were encountered:
palisadoes
changed the title
Feature Request : Replace Base64 Storage with MinIO Client in OrganizationModal.tsx
NoMongo: Replace Base64 Storage with MinIO Client in OrganizationModal.tsx
Feb 24, 2025
Problem
OrganizationModal.tsx currently stores images using Base64 encoding, leading to increased memory usage and slower performance.
Solution
Replace Base64 encoding with MinIO client for direct file uploads and store only file URLs.
Alternatives Considered
Approach
Additional Context
This update will optimize performance, reduce bandwidth usage, and improve data handling.
NOTE
We recently discovered a flaw in the code base where there are some XSS and CORS vulnerabilities. This occurs when the API and Admin servers run on different machines.
You will notice this if you configure your Admin app on your local machine to use the API running on https://test.talawa.io/graphql.
The errors in your browser will look like this:
As part of this issue you will need to ensure that the browser only interacts with the API through the Admin server and never with the API directly.
The text was updated successfully, but these errors were encountered: