Add config option to restrict import file size

adapt-security · Nov 8, 2024 · 709b3df · 709b3df
1 parent 22915ba
commit 709b3df
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/conf/config.schema.json b/conf/config.schema.json
@@ -31,6 +31,12 @@
     "frameworkRepository": {
       "description": "URL of the Adapt framework git repository to install",
       "type": "string"
+    },
+    "importMaxFileSize": {
+      "description": "Maximum file upload size for course imports",
+      "type": "string",
+      "isBytes": true,
+      "default": "500mb"
     }
   }
 }
diff --git a/lib/AdaptFrameworkUtils.js b/lib/AdaptFrameworkUtils.js
@@ -294,12 +294,12 @@ class AdaptFrameworkUtils {
    * @return {Promise}
    */
   static async handleImportFile (req, res) {
-    const middleware = await App.instance.waitForModule('middleware')
+    const [fw, middleware] = await App.instance.waitForModule('adaptframework', 'middleware')
     const handler = req.get('Content-Type').indexOf('multipart/form-data') === 0
       ? middleware.fileUploadParser
       : middleware.urlUploadParser
     return new Promise((resolve, reject) => {
-      handler(middleware.zipTypes, { unzip: true })(req, res, e => e ? reject(e) : resolve())
+      handler(middleware.zipTypes, { maxFileSize: fw.getConfig('importMaxFileSize'), unzip: true })(req, res, e => e ? reject(e) : resolve())
     })
   }
 }