Umputun
35a389cb75
Excessive memory allocation during VP8L decoding, reachable from app/store/image/image.go:333 where image.Decode runs on uploaded data. The existing DecodeConfig dimension guard doesn't cover it, since the over-allocation happens during decode rather than from declared dimensions. Tidies backend/_example/memory_store in the same commit: it carries the backend's deps as indirect entries and would otherwise fail the example CI step.
39 lines
1.3 KiB
AMPL
39 lines
1.3 KiB
AMPL
module github.com/umputun/remark42/memory_store
|
|
|
|
go 1.25.0
|
|
|
|
require (
|
|
github.com/go-pkgz/jrpc v0.4.0
|
|
github.com/go-pkgz/lgr v0.12.3
|
|
github.com/jessevdk/go-flags v1.6.1
|
|
github.com/stretchr/testify v1.11.1
|
|
github.com/umputun/remark42/backend v1.1000.0
|
|
)
|
|
|
|
require (
|
|
github.com/Depado/bfchroma/v2 v2.0.0 // indirect
|
|
github.com/PuerkitoBio/goquery v1.12.0 // indirect
|
|
github.com/alecthomas/chroma/v2 v2.27.0 // indirect
|
|
github.com/andybalholm/cascadia v1.3.4 // indirect
|
|
github.com/aymerick/douceur v0.2.0 // indirect
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
|
github.com/dlclark/regexp2/v2 v2.2.2 // indirect
|
|
github.com/go-pkgz/rest v1.22.0 // indirect
|
|
github.com/go-pkgz/routegroup v1.6.0 // indirect
|
|
github.com/gorilla/css v1.0.1 // indirect
|
|
github.com/kr/text v0.2.0 // indirect
|
|
github.com/microcosm-cc/bluemonday v1.0.27 // indirect
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
|
github.com/rogpeppe/go-internal v1.14.1 // indirect
|
|
github.com/rs/xid v1.6.0 // indirect
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
|
go.etcd.io/bbolt v1.5.0 // indirect
|
|
golang.org/x/crypto v0.53.0 // indirect
|
|
golang.org/x/image v0.45.0 // indirect
|
|
golang.org/x/net v0.56.0 // indirect
|
|
golang.org/x/sys v0.47.0 // indirect
|
|
gopkg.in/yaml.v3 v3.0.1 // indirect
|
|
)
|
|
|
|
replace github.com/umputun/remark42/backend v1.1000.0 => ../../
|