diff --git a/appview/repo/blob.go b/appview/repo/blob.go index 72e22404..4785633e 100644 --- a/appview/repo/blob.go +++ b/appview/repo/blob.go @@ -143,6 +143,11 @@ func (rp *Repo) Blob(w http.ResponseWriter, r *http.Request) { }, nil } + // skip large blobs + if blobResp.ContentLength > maxBlobSize || blobResp.ContentLength < 0 { + l.Error("large blob:", "ContentLength", blobResp.ContentLength, "maxBlobSize", maxBlobSize) + } + content, err := io.ReadAll(io.LimitReader(blobResp.Body, maxBlobSize+1)) if err != nil { return models.BlobView{}, err