diff --git a/appview/repo/blob.go b/appview/repo/blob.go --- a/appview/repo/blob.go +++ b/appview/repo/blob.go @@ -143,6 +143,11 @@ SizeHint: uint64(max(blobResp.ContentLength, 0)), }, nil } + // skip large blobs + if blobResp.ContentLength > maxBlobSize || blobResp.ContentLength < 0 { + l.Error("large blob:", "ContentLength", blobResp.ContentLength, "maxBlobSize", maxBlobSize) + } + content, err := io.ReadAll(io.LimitReader(blobResp.Body, maxBlobSize+1)) if err != nil { return models.BlobView{}, err