kolaente 7b4b6046ca fix(migration): bound vikunja file imports ...

Preflight over the declared uncompressed sizes (overflow-safe), a file
count cap and a per-user storage quota bound the import before
anything is read; the actual decompressed bytes are still counted
against the same budget while reading. Attachments and backgrounds
now stream through a lazy provider: one zip entry is decompressed
into a private temp file at a time. A failed import deletes the file
blobs it wrote, which were orphaned for every migrator before.

2026-08-31 18:37:03 +02:00

..

handler

fix(migration): bound vikunja file imports

2026-08-31 18:37:03 +02:00

unsplash

fix(unsplash): route api requests through the SSRF-safe http client

2026-07-28 17:26:12 +02:00

upload

…

background.go

…