mirror of
https://github.com/Crosstalk-Solutions/project-nomad.git
synced 2026-10-17 05:14:19 +02:00
78017a333d
The UI enforces 500 characters but the validator did not, so the API accepted up to the MySQL TEXT ceiling. The API needs no authentication by design, so an uncapped free-text column reachable from any page a user visits is a cheap way to bloat the database. Matches the limit the form already shows. Found in a security review of the release PRs. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01F8Mgg1vd2eKSs8StZiuyMV |
||
|---|---|---|
| .. | ||
| benchmark_controller.ts | ||
| chats_controller.ts | ||
| collection_updates_controller.ts | ||
| conditions_controller.ts | ||
| creator_packs_controller.ts | ||
| docs_controller.ts | ||
| downloads_controller.ts | ||
| drug_reference_controller.ts | ||
| easy_setup_controller.ts | ||
| home_controller.ts | ||
| maps_controller.ts | ||
| nomad_md_controller.ts | ||
| ollama_controller.ts | ||
| openapi_controller.ts | ||
| rag_controller.ts | ||
| settings_controller.ts | ||
| supply_depot_controller.ts | ||
| system_controller.ts | ||
| zim_controller.ts | ||