I wonder if Toolset removes metadata from images. I'm looking for ways to comfortably download user images (to remove all metadata and ensure a user-friendly size) but it would be very convenient if the custom fields came with that security layer
In general, any safety advice or good practices are very welcome
Toolset itself doesn't manipulate image files, and it uses regular WordPress functions to handle uploaded files.
I'm not aware that WordPress strips such metadata, but I expect any solution you find that works with uploads to the WordPress Media Library would also work when uploading images to Toolset image custom fields.
Thanks, both the "Strip Image Metadata for JPG and WEBP" and "WP Strip Image Metadata" plugins seem to work well and provide an extra layer of security