vikunja

mirror of https://github.com/go-vikunja/vikunja.git synced 2026-05-07 20:38:46 -05:00

Files

kolaente 94f42bd6b2 fix(files): derive file size from reader at creation boundary

Authoritative size now comes from the reader instead of the caller's
claim in CreateWithMimeAndSession. The migration import path accepts
attacker-controlled metadata (GHSA-qh78-rvg3-cv54), so trusting
realsize for the limit check allowed oversized uploads to be accepted
and stored.

measureReaderSize leaves the reader seeked to 0 so the measured value
matches the bytes storage backends will actually write.

2026-04-09 16:22:56 +00:00

db.go

feat: register Vikunja tables with db package at init

2026-03-04 15:37:54 +01:00

diagnostics_unix.go

feat(doctor): add user namespace detection and improved storage diagnostics (#2180 )

2026-02-01 11:57:35 +01:00

diagnostics_windows.go

feat(doctor): add user namespace detection and improved storage diagnostics (#2180 )

2026-02-01 11:57:35 +01:00

dump.go

…