mirror of
https://github.com/rcourtman/Pulse.git
synced 2026-09-11 22:12:23 +00:00
6eb7f06df1
Add http.MaxBytesReader limits to prevent memory exhaustion attacks: - UpdateEmailConfig: 32KB limit - UpdateAppriseConfig: 64KB limit - CreateWebhook: 64KB limit - UpdateWebhook: 64KB limit This follows the pattern already used in system_settings.go for SSH config validation.
Internal API Package
This directory contains the API server implementation for Pulse.
Important Note About frontend-modern/
The frontend-modern/ subdirectory that appears here is:
- AUTO-GENERATED during builds
- NOT the source code - just a build artifact
- IN .gitignore - never committed
- REQUIRED BY GO - The embed directive needs it here
Frontend Development Location
👉 Edit frontend files at: /opt/pulse/frontend-modern/src/
Why This Structure?
Go's //go:embed directive has limitations:
- Cannot use
../paths to access parent directories - Cannot follow symbolic links
- Must embed files within the Go module
This is a known Go limitation and our structure works around it.