Mauandkolaente d86af5c9b6 fix(avatar): bounds-check size before narrowing int64 to int ...

GetAvatar converted a caller-supplied size int64 directly to int via
int(size) for imaging.Resize, with no check that the value was
non-negative or within int's range. size traces back to an
unauthenticated query parameter; on 32-bit builds a large int64
would silently truncate/wrap when narrowed, and a negative value
would feed straight into the resize call. Reject out-of-range values
before the conversion instead of letting it wrap silently.

2026-07-29 22:53:46 +02:00

..

upload_test.go

test: remove obsolete invalid-cache-type test for avatar upload

2026-04-08 08:56:22 +00:00

upload.go

fix(avatar): bounds-check size before narrowing int64 to int

2026-07-29 22:53:46 +02:00