Image (security) issues (bludit 3.15)

[tezalsec]

Hi, I'm new to Bludit and exploring it. I found these two issues concerning the profile issues, I am not sure I should post this here or in the forum or both:

• when uploading a profile picture of 100 kb, it is uploaded with an endresult of 627 kb! How is this possible? Can I disable any kind of image handling so it just stays the same kb?

• the profile picture uses the username as filename, this seems like an obvious security issue, allowing people to know the username.

Bludit version : 3.15
PHP 8.1

Thank you.

[Mates-K1]

I can confirm both "characteristics".

Bludit version : 3.15
PHP 8.3