feat: restrict max avatar size

resolves #1171
2022-06-12 18:29:12 +02:00
parent 172a6214d7
commit 2f25b48869
7 changed files with 26 additions and 4 deletions
--- a/config.yml.sample
+++ b/config.yml.sample
@ -56,6 +56,9 @@ service:
  # it may be required to coordinate with them in order to delete the account. This setting will not affect the cli commands
  # for user deletion.
  enableuserdeletion: true
+  # The maximum size clients will be able to request for user avatars.
+  # If clients request a size bigger than this, it will be changed on the fly.
+  maxavatarsize: 1024

 database:
  # Database type to use. Supported types are mysql, postgres and sqlite.