Files
vikunja/pkg/caldav
kolaente daa4676e94 fix(caldav): only parse calendar bodies for PUT after access checks
Task bodies sent to a collection URL are now only parsed for PUT and
after the read check.

Calendar bodies are also limited in size (1 MiB) and in parameters per
property (100) before golang-ical sees them. Violations are answered with
413/400.
2026-11-05 15:42:45 +01:00
..