From c16ef05d8882afd3a0f388835d4d77ed2f38f4e2 Mon Sep 17 00:00:00 2001
From: Thomas Citharel <tcit@tcit.fr>
Date: Fri, 18 Oct 2019 14:10:39 +0200
Subject: [PATCH] Limit multipart upload to 10MB

Signed-off-by: Thomas Citharel <tcit@tcit.fr>
---
 lib/mobilizon_web/endpoint.ex | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/lib/mobilizon_web/endpoint.ex b/lib/mobilizon_web/endpoint.ex
index 82327333b..1ff261e7a 100644
--- a/lib/mobilizon_web/endpoint.ex
+++ b/lib/mobilizon_web/endpoint.ex
@@ -41,7 +41,7 @@ defmodule MobilizonWeb.Endpoint do
 
   plug(
     Plug.Parsers,
-    parsers: [:urlencoded, :multipart, :json, Absinthe.Plug.Parser],
+    parsers: [:urlencoded, {:multipart, length: 10_000_000}, :json, Absinthe.Plug.Parser],
     pass: ["*/*"],
     json_decoder: Jason
   )