Mauandkolaente eb31ee3780 fix(migration/csv): cap CSV import buffer to the configured upload limit ...

DetectCSVStructure, PreviewImport, and MigrateWithConfig each did
make([]byte, size) with size taken directly from the caller (an
uploaded file's declared size) with no upper bound, letting a
malicious or corrupt size value force an arbitrarily large
allocation. Cap it to the server's existing configured max upload
size before allocating.

2026-07-29 22:53:46 +02:00

..

csv_test.go

…

csv.go

fix(migration/csv): cap CSV import buffer to the configured upload limit

2026-07-29 22:53:46 +02:00

handler.go

refactor(migration): extract file/CSV migrate orchestration into shared funcs

2026-06-12 08:51:19 +00:00