From d6aae531b6d4a11106f4fcaa9eb533bb20d25f18 Mon Sep 17 00:00:00 2001
From: Kayra Uylar <52961639+kuylar@users.noreply.github.com>
Date: Fri, 12 Jan 2024 10:48:56 +0300
Subject: [PATCH] Implement a content length check (#113)

---
 LightTube/Controllers/SettingsController.cs  |  2 ++
 LightTube/Views/Settings/ImportExport.cshtml | 20 ++++++++++----------
 2 files changed, 12 insertions(+), 10 deletions(-)

diff --git a/LightTube/Controllers/SettingsController.cs b/LightTube/Controllers/SettingsController.cs
index dfdabad9..6ff9f719 100644
--- a/LightTube/Controllers/SettingsController.cs
+++ b/LightTube/Controllers/SettingsController.cs
@@ -85,6 +85,8 @@ public IActionResult ImportExport()
 		try
 		{
 			IFormFile file = Request.Form.Files[0];
+			if (file.Length is 0 or > 10 * 1024 * 1024)
+				return View(new ImportContext(HttpContext, "Imported file cannot be larger than 10 megabytes.", true));
 			using Stream fileStream = file.OpenReadStream();
 			using MemoryStream memStr = new();
 			fileStream.CopyTo(memStr);
diff --git a/LightTube/Views/Settings/ImportExport.cshtml b/LightTube/Views/Settings/ImportExport.cshtml
index 8e008695..535ef84a 100644
--- a/LightTube/Views/Settings/ImportExport.cshtml
+++ b/LightTube/Views/Settings/ImportExport.cshtml
@@ -20,7 +20,7 @@
 			File
 		</div>
 		<div>
-			See below for supported formats
+			(up to 10MB) See below for supported formats
 		</div>
 	</div>
 	<div class="settings-option__option">
@@ -33,15 +33,15 @@
 <h1 class="title">Export Data</h1>
 <a href="/export/fullData.json" class="btn-blue btn-outline">Export all data as JSON</a>
 
+<h1 class="title">Supported formats for importing</h1>
+<ul>
+	<li>YouTube takeouts (.zip)</li>
+	<li>Invidious XML/OPML exports (.xml)</li>
+	<li>Invidious JSON exports (.json)</li>
+	<li>Piped playlists (.json)</li>
+	<li>Piped subscriptions (.json)</li>
+	<li>LightTube exports (.json)</li>
+</ul>
 <p>
-	<h1 class="title">Supported formats for importing</h1>
-	<ul>
-		<li>YouTube takeouts (.zip)</li>
-		<li>Invidious XML/OPML exports (.xml)</li>
-		<li>Invidious JSON exports (.json)</li>
-		<li>Piped playlists (.json)</li>
-		<li>Piped subscriptions (.json)</li>
-		<li>LightTube exports (.json)</li>
-	</ul>
 	If you need support for other websites/apps, please <a href="https://github.com/kuylar/LightTube/issues">open an issue on GitHub</a>
 </p>
\ No newline at end of file