inabahare / lewd2

A based file uploader
https://lewd.se
GNU General Public License v3.0
23 stars 3 forks source link

Max upload size sanity check broken #66

Closed kattjevfel closed 5 years ago

kattjevfel commented 5 years ago

It is possible to input negative numbers and users might end up with fantastic results such as File is too big (34.62MiB). Max filesize: -0.012312MiB..

topkek It is also possible to input anything above the "limit" put in place (Upload size can't be less than 1 byte or greater than 1TB (0.91TiB))

The above message is only shown when input field is empty, and still produces a link (though the link does nothing).

Affected page: http://localhost/user/admin/token