Mauandkolaente eb31ee3780 fix(migration/csv): cap CSV import buffer to the configured upload limit ...

DetectCSVStructure, PreviewImport, and MigrateWithConfig each did
make([]byte, size) with size taken directly from the caller (an
uploaded file's declared size) with no upper bound, letting a
malicious or corrupt size value force an arbitrarily large
allocation. Cap it to the server's existing configured max upload
size before allocating.

2026-07-29 22:53:46 +02:00

..

csv

fix(migration/csv): cap CSV import buffer to the configured upload limit

2026-07-29 22:53:46 +02:00

handler

refactor(migration): extract file/CSV migrate orchestration into shared funcs

2026-06-12 08:51:19 +00:00

microsoft-todo

fix(security): require Admin to detach a project from its parent (GHSA-44v6-7fxq-vgf4)

2026-07-19 18:59:34 +02:00

ticktick

fix(migration): prevent stack overflow on ticktick parentId cycles

2026-07-29 09:22:22 +02:00

todoist

fix(security): require Admin to detach a project from its parent (GHSA-44v6-7fxq-vgf4)

2026-07-19 18:59:34 +02:00

trello

fix(security): require Admin to detach a project from its parent (GHSA-44v6-7fxq-vgf4)

2026-07-19 18:59:34 +02:00

vikunja-file

test(migration): regression test for forged attachment size

2026-04-09 16:22:56 +00:00

wekan

feat(migration/wekan): import attachments from board export

2026-04-13 16:04:14 +00:00

create_from_structure_test.go

fix(migration): seed task positions for exports without order information

2026-07-26 01:13:08 +00:00

create_from_structure.go

fix(migration): seed task positions for exports without order information

2026-07-26 01:13:08 +00:00

db.go

…

errors.go

feat(api/v2): port OAuth migrators (Todoist, Trello, Microsoft To-Do)

2026-06-11 18:35:55 +00:00

helpers_test.go

…

helpers.go

…

main_test.go

…

migration_status.go

feat(api/v2): port OAuth migrators (Todoist, Trello, Microsoft To-Do)

2026-06-11 18:35:55 +00:00

migrator.go

…

testimage.jpg

…