Aktueller Stand

app/api/settings/logo/route.ts

@@ -16,6 +16,7 @@ const MIME_TO_EXT: Record<string, string> = {
   "image/webp": "webp",
   "image/svg+xml": "svg"
 };
+const MAX_FILE_SIZE = 2 * 1024 * 1024;
 
 const resolveLogoPath = (relativePath: string) => {
   const absolutePath = path.join(DATA_DIR, relativePath);
@@ -51,6 +52,9 @@ export async function POST(request: Request) {
   if (!extension) {
     return NextResponse.json({ error: "Dateityp nicht unterstützt." }, { status: 400 });
   }
+  if (file.size > MAX_FILE_SIZE) {
+    return NextResponse.json({ error: "Datei ist zu groß (max. 2 MB)." }, { status: 400 });
+  }
 
   await fs.mkdir(UPLOADS_DIR, { recursive: true });