H1K0 fa2acca858 fix(backend): cap upload size to prevent memory exhaustion ...

Upload and Replace buffered the entire request body into memory with no
size limit, so a few large uploads could OOM the server. The file
handler now wraps the request body in http.MaxBytesReader and rejects any
file larger than MAX_UPLOAD_BYTES (default 500 MiB) before it is buffered.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-10 14:07:34 +03:00

..

cmd/server

fix(backend): cap upload size to prevent memory exhaustion

2026-06-10 14:07:34 +03:00

internal

fix(backend): cap upload size to prevent memory exhaustion

2026-06-10 14:07:34 +03:00

migrations

fix(backend): bootstrap admin from env instead of seeding admin/admin

2026-06-10 14:01:48 +03:00

go.mod

feat(backend): add integration tests with testcontainers-go

2026-04-05 02:34:16 +03:00

go.sum

feat(backend): add integration tests with testcontainers-go

2026-04-05 02:34:16 +03:00