dandri/simplex-chat
1
0
Fork 0
mirror of https://github.com/simplex-chat/simplex-chat.git synced 2026-07-02 22:11:54 +00:00
Code Issues Packages Projects Releases Wiki Activity

cli: enforce profile image size limit in --user-image-file

Browse Source 
Reject the file if the encoded data URL exceeds 12500 bytes - matches
the cap mobile and desktop UIs pass to resizeImageToStrSize for profile
images. Without this, oversized images would be silently set on the
user profile.
This commit is contained in:
shum
2026-05-05 07:52:40 +00:00
parent 7a28ed0e9d
commit 33829d5576
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/Simplex/Chat/Core.hs
+6 -1
View File
@@ -228,9 +228,14 @@ loadImageFile path = case map toLower (takeExtension path) of
".jpeg" -> readAs "image/jpg"
ext -> pure $ Left $ "--user-image-file: unsupported image extension " <> show ext <> " (only .png, .jpg, .jpeg)"
where
-- matches the cap mobile/desktop UIs pass to resizeImageToStrSize for profile images
maxProfileImageSize = 12500
readAs mime = do
bs <- BS.readFile path
pure $ Right $ ImageData $ "data:" <> mime <> ";base64," <> decodeUtf8 (B64.encode bs)
let url = "data:" <> mime <> ";base64," <> decodeUtf8 (B64.encode bs)
pure $ if T.length url > maxProfileImageSize
then Left $ "--user-image-file: encoded image size " <> show (T.length url) <> " bytes exceeds max " <> show maxProfileImageSize <> " bytes"
else Right $ ImageData url
userStr :: User -> String
userStr User {localDisplayName, profile = LocalProfile {fullName}} =