raise overall content body size, routes will implement stricter limits

app/routes/users.py

@@ -20,6 +20,8 @@ import time
 import re
 import os
 
+AVATAR_MAX_SIZE = 1000 * 1000
+
 bp = Blueprint("users", __name__, url_prefix = "/users/")
 
 
@@ -451,6 +453,14 @@ def set_avatar(username):
         flash('Avatar missing.', InfoboxKind.ERROR)
         return redirect(url_for('.settings', username=user.username))
 
+    file.seek(0, os.SEEK_END)
+    file_size = file.tell()
+    file.seek(0, os.SEEK_SET)
+
+    if file_size > AVATAR_MAX_SIZE:
+        flash('Avatar image is over 1MB.', InfoboxKind.ERROR)
+        return redirect(url_for('.settings', username=user.username))
+
     file_bytes = file.read()
 
     now = int(time.time())