mirror of
https://github.com/documenso/documenso.git
synced 2026-07-14 23:07:13 +10:00
ephraimduncan
138d663c25
Merge origin/main into feat/external-2fa-codes. Resolve formatting conflicts caused by biome rollout; preserve both feature streams: PR's external 2FA token + signing-session 2FA proof additions plus main's RateLimit/RecipientExpired/signingReminders/date-auto-insert. In complete-document-with-token.ts, drop the duplicate early field-fetching block introduced when main moved that logic later with date auto-insert support; keep the EXTERNAL_TWO_FACTOR_AUTH check using derivedRecipientActionAuth.
12 lines
566 B
TypeScript
12 lines
566 B
TypeScript
/**
|
|
* Maximum length (in characters) of the user-supplied custom CSS for branding.
|
|
* Bound enforced at the TRPC request boundary on both the organisation and
|
|
* team settings update routes. The sanitiser is run after this check; this
|
|
* limit is purely a request-size guard.
|
|
*
|
|
* 256 KB — generous enough for hand-written branding CSS and the occasional
|
|
* compiled-from-Tailwind-or-similar paste, while still keeping a request
|
|
* cap so a malicious or runaway payload can't exhaust PostCSS/server memory.
|
|
*/
|
|
export const BRANDING_CSS_MAX_LENGTH = 256 * 1024;
|