Skip to content

[stable35] fix(avatar): add timeout and size limit when fetching remote avatars - #66162

Merged
AndyScherzinger merged 2 commits into
stable35from
backport/66161/stable35
Nov 2, 2026
Merged

AndyScherzinger merged 2 commits into
stable35from
backport/66161/stable35

Conversation

@backportbot

@backportbot backportbot Bot commented Nov 2, 2026

Copy link
Copy Markdown

Backport of PR #66161

Remote avatars are used to show the owners of federated shares, so only
look them up for logged-in users. Use a short timeout and stream the
response with a 2 MiB limit, like the link preview fetch does.

Assisted-by: ClaudeCode:claude-opus-5-5
Signed-off-by: John Molakvoæ <14975046+skjnldsv@users.noreply.github.com>
@backportbot
backportbot Bot requested a review from susnux November 2, 2026 20:35
@backportbot
backportbot Bot requested a review from a team as a code owner November 2, 2026 20:35
@backportbot
backportbot Bot requested review from Altahrim and skjnldsv and removed request for a team November 2, 2026 20:35
@backportbot backportbot Bot added bug 3. to review Waiting for reviews AI assisted labels Nov 2, 2026
@backportbot backportbot Bot added this to the Nextcloud 35.0.3 milestone Nov 2, 2026
Assisted-by: ClaudeCode:claude-opus-5-5
Signed-off-by: John Molakvoæ <14975046+skjnldsv@users.noreply.github.com>
@AndyScherzinger
AndyScherzinger merged commit 41182f2 into stable35 Nov 2, 2026
180 of 182 checks passed
@AndyScherzinger
AndyScherzinger deleted the backport/66161/stable35 branch November 2, 2026 21:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants