denkfabrik-li 71d6b8937e Enforce the max file size against the bytes a chunked upload assembles ...

store() checks Setting::MaxFileSizeMb against the size the client declares
when it opens the session, and complete() re-checks the storage quota
against the real assembled byte count -- but nothing re-checked the size
limit itself. A client that declared a one-byte upload and then streamed
gigabytes of parts passed store()'s check and was never stopped, so the
configured limit (which store() applies to everyone, staff included) did
not hold for the resumable path that real uploads use.

Re-check the assembled byte count against MaxFileSizeMb in complete(),
cleaning up the assembled bytes and the session exactly as the quota
branch already does.

2026-08-25 20:32:13 +02:00

..

Controllers

Enforce the max file size against the bytes a chunked upload assembles

2026-08-25 20:32:13 +02:00

Resources/Api

ProjectSend 2.0.0

2026-08-14 01:38:12 -03:00