Strip Image Metadata (#2313)

js/modules/types/attachment.js

@@ -47,6 +47,8 @@ exports.isValid = rawAttachment => {
 };
 
 // Upgrade steps
+// NOTE: This step strips all EXIF metadata from JPEG images as
+// part of re-encoding the image:
 exports.autoOrientJPEG = async attachment => {
   if (!MIME.isJPEG(attachment.contentType)) {
     return attachment;

js/modules/types/message.js

@@ -16,6 +16,8 @@ const PRIVATE = 'private';
 //   - Schema initialized
 // Version 1
 //   - Attachments: Auto-orient JPEG attachments using EXIF `Orientation` data.
+//     N.B. The process of auto-orient for JPEGs strips (loses) all existing
+//     EXIF metadata improving privacy, e.g. geolocation, camera make, etc.
 // Version 2
 //   - Attachments: Sanitize Unicode order override characters.
 // Version 3