Show HN: Zero Trust API – Image CDR in Rust/WASM (Rebuild Images from Pixels)(zero-trust-web.vercel.app)
zero-trust-web.vercel.app
Show HN: Zero Trust API – Image CDR in Rust/WASM (Rebuild Images from Pixels)
https://zero-trust-web.vercel.app/
1 comments
Hi HN! I built this after 3 months researching image-based attacks.
The problem: Apps that accept user images typically just strip EXIF metadata. But this misses: - Steganographic payloads (data hidden in pixel LSBs) - Polyglot files (valid as both image AND executable) - Image bombs (1x50000px files that exhaust memory)
My approach: Content Disarm & Reconstruction (CDR) - Decode image to raw pixel buffer - Completely discard the original container - Rebuild a sterile PNG from scratch
Stack: Rust core → WebAssembly sandbox → Cloudflare Workers edge
Free tier: 100 requests/month on RapidAPI
Happy to answer questions about the architecture, threat model, or implementation!
The problem: Apps that accept user images typically just strip EXIF metadata. But this misses: - Steganographic payloads (data hidden in pixel LSBs) - Polyglot files (valid as both image AND executable) - Image bombs (1x50000px files that exhaust memory)
My approach: Content Disarm & Reconstruction (CDR) - Decode image to raw pixel buffer - Completely discard the original container - Rebuild a sterile PNG from scratch
Stack: Rust core → WebAssembly sandbox → Cloudflare Workers edge
Free tier: 100 requests/month on RapidAPI
Happy to answer questions about the architecture, threat model, or implementation!
API Docs & Demo: [Zero Trust App](https://zero-trust-web.vercel.app/) � RapidAPI (Get a key): [Zero Trust API] (https://rapidapi.com/image-zero-trust-security-labs/api/zero...)