From cd33b976fb062fb35705aafe45f93dff1fe8c6d5 Mon Sep 17 00:00:00 2001 From: Damien <damien.burel@maarch.org> Date: Wed, 26 Jun 2019 12:16:13 +0200 Subject: [PATCH] FEAT #8879 TIME 0:15 Signature size control --- src/app/user/controllers/SignatureController.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/app/user/controllers/SignatureController.php b/src/app/user/controllers/SignatureController.php index ad5687a718..b3d4c56d96 100755 --- a/src/app/user/controllers/SignatureController.php +++ b/src/app/user/controllers/SignatureController.php @@ -87,8 +87,11 @@ class SignatureController $finfo = new \finfo(FILEINFO_MIME_TYPE); $mimeType = $finfo->buffer($signature); $type = explode('/', $mimeType); + $size = strlen($signature); if ($type[0] != 'image') { return $response->withStatus(400)->withJson(['errors' => 'Signature is not an image']); + } elseif ($size > 2000000) { + return $response->withStatus(400)->withJson(['errors' => 'Max file size reached (2 MB)']); } $storeInfos = DocserverController::storeResourceOnDocServer([ -- GitLab