fix(webserver): Set max avatar size (TabbyML#1746)

* fix(webserver): Set max avatar size * Update ee/tabby-webserver/src/service/auth.rs --------- Co-authored-by: Meng Zhang <[email protected]>
CatsPunch · Mar 29, 2024 · 4e5bbec · 4e5bbec
1 parent 92224a6
commit 4e5bbec
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ee/tabby-webserver/src/service/auth.rs b/ee/tabby-webserver/src/service/auth.rs
@@ -191,6 +191,9 @@ impl AuthenticationService for AuthenticationServiceImpl {
     }
 
     async fn update_user_avatar(&self, id: &ID, avatar: Option<Box<[u8]>>) -> Result<()> {
+        if avatar.as_ref().is_some_and(|v| v.len() > 512 * 1024) {
+            return Err(anyhow!("The image you are attempting to upload is too large. Please ensure the file size is under 512KB").into());
+        }
         let id = id.as_rowid()?;
         self.db.update_user_avatar(id, avatar).await?;
         Ok(())