raystack / frontier / 28654358183

45%

main: 45%

Pull #1734

github

feat(avatar): validate user and org avatar fields

Avatars must now be base64 JPEG or PNG data URLs within a configurable
size cap (app.avatar.max_size_bytes, default 1MB). Validation runs in
the user and organization services, and the admin UI server now sets a
Content-Security-Policy header for images.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

57 of 71 new or added lines in 8 files covered. (80.28%)

16931 of 37672 relevant lines covered (44.94%)

12.49 hits per line