Waleed 2b35a3c9c7 fix(files): bound the HEIF fallback decode input (#6348) ...

Uploads allow 100MB and prepareImageForVision runs sharp with
limitInputPixels: false, so nothing upstream capped what could reach the
single-threaded WebAssembly decoder. A tenant-controlled file could therefore
spend unbounded CPU and memory on one read.

Cap the transcode input at 20MB — generous headroom over any phone photo,
which runs 1-4MB. Pixel-dimension bombs stay bounded by libheif's own
security limits during parse.

2026-08-06 16:05:37 -07:00

..

desktop

…

docs

feat(embeddings): multi-provider Embeddings block on a shared core (#6317)

2026-08-06 15:25:17 -07:00

pii

…

realtime

…

sim

fix(files): bound the HEIF fallback decode input (#6348)

2026-08-06 16:05:37 -07:00