akkoma/docs/docs
Oneric d6d838cbe8 StealEmoji: check remote size before downloading
To save on bandwith and avoid OOMs with large files.
Ofc, this relies on the remote server
 (a) sending a content-length header and
 (b) being honest about the size.

Common fedi servers seem to provide the header and (b) at least raises
the required privilege of an malicious actor to a server infrastructure
admin of an explicitly allowed host.

A more complete defense which still works when faced with
a malicious server requires changes in upstream Finch;
see https://github.com/sneako/finch/issues/224
2024-03-18 22:33:10 -01:00
..
administration Document live dashboard 2024-02-15 16:04:33 +01:00
configuration StealEmoji: check remote size before downloading 2024-03-18 22:33:10 -01:00
css
development Merge branch 'followback' into develop 2024-02-16 13:27:40 +00:00
fonts
images
installation More prominently document db migrations in migrations from Pleroma 2024-02-23 23:54:14 +01:00
clients.md
index.md
support.include