Daniel bf4f895f2c fix: article uploads are 10 MB, type-checked both ways, and sniffed ... The ceiling was 100 MB per file with ten files allowed at once, and every file is held whole in memory to be parsed — so the old limit let a single request ask for a gigabyte of heap. A source article that size is not a thing anyone uploads here. Now 10 MB, defined once and used by both the multer limit and the post-upload check. The filter accepted `allowed mime OR allowed extension`, so naming a file .pdf was enough on its own, whatever it declared — and the extension is chosen by whoever uploads. Both are required now. Neither of those sees any bytes: multer filters on the headers, before the file has arrived. verifySources() runs once the buffer exists and refuses a file whose contents are not what its type claims, using the same helper as documents, S3 uploads and assistant attachments. It runs before extraction, because an extractor handed a malformed file is where the damage would happen. The CMS screen said 100 MB and listed four of the ten accepted formats; it now says what the server actually does. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Dv6sqaY6Vq3ChZHMem3cnU		2026-09-12 19:25:41 +02:00
..
db	feat: keep the screen awake while recording, and keep every recording 24h	2026-09-10 16:42:31 +02:00
middleware	fix: enforce sessions, escape quiz metadata and isolate ED drafts	2026-09-06 07:44:08 +02:00
routes	fix: article uploads are 10 MB, type-checked both ways, and sniffed	2026-09-12 19:25:41 +02:00
utils	fix: article uploads are 10 MB, type-checked both ways, and sniffed	2026-09-12 19:25:41 +02:00