Add size limit to uploads #43

Merged

BlakeRain merged 1 commit from security/upload-hardening into main

2026-05-24 11:35:11 +00:00

BlakeRain commented

2026-05-24 11:26:00 +00:00

Owner

This PR adds a new option --upload-size-limit that enables a limit on the size of uploads in a single request. This should mitigate potential DoS with very large requests.

If the --upload-size-limit is set, then the maximum size of a request to the /uploads endpoint is limited. This requires that the Content-Length header is present, but will also count the bytes that are being read from the stream to ensure they do not exceed the limit in cases where the Content-Length header is lying.

This PR adds a new option `--upload-size-limit` that enables a limit on the size of uploads in a single request. This should mitigate potential DoS with very large requests. If the `--upload-size-limit` is set, then the maximum size of a request to the `/uploads` endpoint is limited. This requires that the `Content-Length` header is present, but will also count the bytes that are being read from the stream to ensure they do not exceed the limit in cases where the `Content-Length` header is lying.

BlakeRain added the

labels

2026-05-24 11:26:00 +00:00

BlakeRain self-assigned this

2026-05-24 11:26:00 +00:00

BlakeRain added 1 commit

2026-05-24 11:26:00 +00:00