From eb69e6fbf8ac948900c0e64252870a0041cb9804 Mon Sep 17 00:00:00 2001
From: Aevann1 <Aevann3@gmail.com>
Date: Tue, 21 Sep 2021 23:54:44 +0200
Subject: [PATCH] fsfs

---
 files/__main__.py        | 2 --
 files/routes/admin.py    | 2 ++
 files/routes/comments.py | 2 ++
 files/routes/posts.py    | 1 +
 files/routes/settings.py | 4 ++++
 5 files changed, 9 insertions(+), 2 deletions(-)

diff --git a/files/__main__.py b/files/__main__.py
index 9478d13a2..3d808cb09 100644
--- a/files/__main__.py
+++ b/files/__main__.py
@@ -84,8 +84,6 @@ db_session = scoped_session(sessionmaker(bind=engine, autoflush=False))
 
 @app.before_request
 def before_request():
-	
-	if request.content_length > 16 * 1024 * 1024: abort(413)
 
 	if request.method.lower() != "get" and app.config["READ_ONLY"]: return {"error":f"{app.config['SITE_NAME']} is currently in read-only mode."}, 500
 
diff --git a/files/routes/admin.py b/files/routes/admin.py
index 401fc6690..25f25f083 100644
--- a/files/routes/admin.py
+++ b/files/routes/admin.py
@@ -644,6 +644,8 @@ def admin_removed(v):
 @admin_level_required(4)
 @validate_formkey
 def admin_image_ban(v):
+	if request.content_length > 16 * 1024 * 1024: abort(413)
+
 
 	i=request.files['file']
 
diff --git a/files/routes/comments.py b/files/routes/comments.py
index c65f38982..12920c69c 100644
--- a/files/routes/comments.py
+++ b/files/routes/comments.py
@@ -129,6 +129,7 @@ def post_pid_comment_cid(cid, pid=None, anything=None, v=None):
 @is_not_banned
 @validate_formkey
 def api_comment(v):
+	if request.content_length > 16 * 1024 * 1024: abort(413)
 
 	parent_submission = request.values.get("submission")
 	parent_fullname = request.values.get("parent_fullname")
@@ -592,6 +593,7 @@ def api_comment(v):
 @auth_required
 @validate_formkey
 def edit_comment(cid, v):
+	if request.content_length > 16 * 1024 * 1024: abort(413)
 
 	c = get_comment(cid, v=v)
 
diff --git a/files/routes/posts.py b/files/routes/posts.py
index afe410986..093aa5a73 100644
--- a/files/routes/posts.py
+++ b/files/routes/posts.py
@@ -588,6 +588,7 @@ def thumbs(new_post):
 @is_not_banned
 @validate_formkey
 def submit_post(v):
+	if request.content_length > 16 * 1024 * 1024: abort(413)
 
 	title = request.values.get("title", "")
 	url = request.values.get("url", "")
diff --git a/files/routes/settings.py b/files/routes/settings.py
index 093a99561..8f7a60e1b 100644
--- a/files/routes/settings.py
+++ b/files/routes/settings.py
@@ -40,6 +40,8 @@ def removebackground(v):
 @auth_required
 @validate_formkey
 def settings_profile_post(v):
+	if request.content_length > 16 * 1024 * 1024: abort(413)
+
 	updated = False
 
 	if request.values.get("background", v.background) != v.background:
@@ -497,6 +499,7 @@ def settings_log_out_others(v):
 @auth_required
 @validate_formkey
 def settings_images_profile(v):
+	if request.content_length > 16 * 1024 * 1024: abort(413)
 
 	if request.headers.get("cf-ipcountry") == "T1": return "Image uploads are not allowed through TOR.", 403
 
@@ -522,6 +525,7 @@ def settings_images_profile(v):
 @auth_required
 @validate_formkey
 def settings_images_banner(v):
+	if request.content_length > 16 * 1024 * 1024: abort(413)
 
 	if request.headers.get("cf-ipcountry") == "T1": return "Image uploads are not allowed through TOR.", 403