From d2d224cdd5938bf9d4fbd59bf38c6d492fc2b140 Mon Sep 17 00:00:00 2001
From: Schalli <kschaller@ctl.de>
Date: Sat, 27 Jun 2026 17:22:27 +0200
Subject: [PATCH] fix(07): WR-05 add 5 MB file size limit to CSV vehicle import
 endpoint
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

FileInterceptor used multer's default memory storage with no size limit.
An oversized file could exhaust Node.js heap before parsing begins.
Add fileSize: 5*1024*1024 (5 MB) — sufficient for any realistic vehicle list.
---
 apps/api/src/dkv/dkv.controller.ts | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/api/src/dkv/dkv.controller.ts b/apps/api/src/dkv/dkv.controller.ts
index bee83a2..c3f8466 100644
--- a/apps/api/src/dkv/dkv.controller.ts
+++ b/apps/api/src/dkv/dkv.controller.ts
@@ -206,7 +206,9 @@ export class DkvController {
    */
   @Post('vehicles/import')
   @Roles(Role.ADMIN, Role.SUPER_ADMIN)
-  @UseInterceptors(FileInterceptor('file'))
+  @UseInterceptors(FileInterceptor('file', {
+    limits: { fileSize: 5 * 1024 * 1024 }, // 5 MB — generous for any realistic vehicle list (WR-05)
+  }))
   async importVehicles(
     @Req() req: any,
     @UploadedFile() file: any,