Security Architecture
Defensive engineering for media processing pipelines
1. Safe Binary Execution
ImageMagick and FFmpeg binaries are never executed via arbitrary shell string concatenation. We utilize Symfony\Component\Process\Process with strictly separated argument arrays, neutralizing shell injection, argument injection, and command chaining exploits entirely.
2. Magic-Byte File Validation
We enforce strict binary magic-byte inspection on all uploads before invocation of downstream decoders. Files masquerading as media (such as PHP scripts, executable headers, or corrupt archive formats) are rejected during the validation pipeline.
3. Isolated Storage Sandboxing
All files reside outside the public web root in non-executable storage directories. Directory structures are partitioned by 128-bit randomized UUIDs, preventing directory traversal or sequential asset enumeration.
4. Automated Retention Expiration
Uploaded assets and cleaned outputs are temporary artifacts. Our background scheduler executes hourly cleanup routines, purging files and expired database job records that exceed the 60-minute retention limit.
5. Vulnerability Disclosure
If you identify a security issue or vulnerability within our service, please contact us directly at security@aicontentremover.local. We acknowledge all legitimate reports promptly.