Skip to content

Automated cherry pick of #220 - #241

Merged
avasconcelos114 merged 1 commit into
release-9.2from
automated-cherry-pick-of-mm-69606-release-9.2
Jul 23, 2026
Merged

Automated cherry pick of #220#241
avasconcelos114 merged 1 commit into
release-9.2from
automated-cherry-pick-of-mm-69606-release-9.2

Conversation

@mattermost-build

Copy link
Copy Markdown
Contributor

Cherry pick of #220 on release-9.2.

/cc @jgheithcock

NONE

* [MM-69606] Limit decompressed size when importing board archives.

parseVersionFile and archive image imports read zip entries without
bounds, allowing small compressed payloads to allocate large amounts
of memory. Apply the existing importMaxFileSize cap consistently across
all entry types and cap the upload request body via MaxBytesReader.

* [MM-69606] Address review feedback and fix archive import tests.

Clean up partial files on size-limit errors, use typed MaxBytesError handling, and add coverage for image/orphan limits and API 413/400 responses. Update permissions and integration tests to send valid multipart uploads after the handler started rejecting non-multipart bodies.

* Honor configured MaxFileSize when stricter than importMaxFileSize

* fix linter

* tets

---------

Co-authored-by: Nevyana Angelova <nevyangelova@192.168.1.10>
(cherry picked from commit a807c9e)
@coderabbitai

coderabbitai Bot commented Jul 23, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: c23d951b-654c-40cd-9da5-21068fadb070

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch automated-cherry-pick-of-mm-69606-release-9.2

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@avasconcelos114
avasconcelos114 merged commit 4ca415b into release-9.2 Jul 23, 2026
22 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants