github-starred/vikunja
2
0
Fork 0
mirror of https://github.com/go-vikunja/vikunja.git synced 2026-11-09 00:22:38 -06:00
Code Issues 690 Packages Projects Releases 13 Wiki Activity
16,768 Commits 133 Branches 65 Tags
main
Commit Graph
3 Commits
Author SHA1 Message Date
kolaente 27ec08bb03 fix(images): limit the side length of decoded images 
Images longer than MaxSide (65535) pixels on either side are now rejected
before decoding, like images over the pixel limit.

Attachments with such images are still stored; only their preview is not
generated. Project backgrounds and avatars reject them with the existing
image too large error.
 2026-11-05 15:42:45 +01:00
kolaente 1edabda41c refactor(imageutils): drop ValidateReader 
Every decode site validates through imageutils.Decode now.
 2026-10-20 23:05:30 +02:00
kolaente 40d95182fc fix(images): bound decode and resize dimensions 
Decoding now validates image dimensions before allocating pixels
(imaging.Fit replaces unbounded Resize so neither side can blow up),
backgrounds decode once and reuse the image for the blur hash, and
DownloadImage is bounded at the configured max file size. Small sources
now keep their native size (Fit does not upscale); the frontend scales
via CSS.
 2026-08-31 18:37:03 +02:00