_:n837d3bf5e01e4dd78ddbbfb333f7403bxb2
<http://schema.org/text>
"I am not sure what use cases are there that require public uploads to be honest except running an image hosting site.\r\n\r\nAlso pretty sure nobody would try to trick uploading the user to upload something to your s3 bucket. But instead upload something themselves and then distribute it.\r\n\r\nWhat you need to do is create a single-use policy, something like explained here - https://stackoverflow.com/a/18901867/551713"
<https://wip.chat/questions/what-s-the-correct-cors-configuration-for-allowing-direct-uploads-in-s3>