kolaente 33389bb0b3 test(migration): regression test for forged attachment size ...

Builds an in-memory export zip with a 2 MB payload and a data.json
that claims size: 0, then asserts neither the honest 2 MB row nor
the forged 0-size row ends up in the files table. Covers
GHSA-qh78-rvg3-cv54.

2026-04-09 16:22:56 +00:00

..

export_pre_0.21.0.zip

…

export.zip

…

main_test.go

…

vikunja_test.go

test(migration): regression test for forged attachment size

2026-04-09 16:22:56 +00:00

vikunja.go

fix(migration): bound per-entry zip cap by configured files.maxsize

2026-04-09 16:22:56 +00:00