increase render size limits on *unlisted* public shares

Author: williamstein

src/packages/next/lib/share/get-contents.ts

@@ -12,19 +12,34 @@ import { getExtension } from "./util";
 
 const MB: number = 1000000;
 
-const LIMITS = {
+const LISTED_LIMITS = {
   listing: 3000, // directory listing is truncated after this many files
   ipynb: 7 * MB,
   sagews: 5 * MB,
   whiteboard: 3 * MB,
   slides: 3 * MB,
   other: 1 * MB,
+  html: 3 * MB,
   // no special viewer
   generic: 2 * MB,
 };
 
+const UNLISTED_LIMITS = {
+  ...LISTED_LIMITS,
+  ipynb: 15 * MB,
+  sagews: 10 * MB,
+  whiteboard: 10 * MB,
+  slides: 10 * MB,
+  other: 5 * MB,
+  html: 40 * MB, // E.g., cambridge: https://cocalc.com/Cambridge/S002211202200903X/S002211202200903X-Figure-4/files/Figure4.html
+
+  // no special viewer
+  generic: 10 * MB,
+};
+
 // also used for proxied content -- see https://github.com/sagemathinc/cocalc/issues/8020
-export function getSizeLimit(path: string): number {
+export function getSizeLimit(path: string, unlisted: boolean = false): number {
+  const LIMITS = unlisted ? UNLISTED_LIMITS : LISTED_LIMITS;
   const ext = getExtension(path);
   if (hasSpecialViewer(ext)) {
     return LIMITS[ext] ?? LIMITS.other;
@@ -53,6 +68,7 @@ export interface PathContents {
 export default async function getContents(
   project_id: string,
   path: string,
+  unlisted?: boolean, // if true, higher size limits, since much less likely to be abused
 ): Promise<PathContents> {
   const fsPath = pathToFiles(project_id, path);
   const obj: PathContents = {};
@@ -70,7 +86,7 @@ export default async function getContents(
     }
   } else {
     // get actual file content
-    if (stats.size >= getSizeLimit(fsPath)) {
+    if (stats.size >= getSizeLimit(fsPath, unlisted)) {
       obj.truncated = "File too big to be displayed; download it instead.";
     } else {
       obj.content = (await fs.readFile(fsPath)).toString();
@@ -107,8 +123,8 @@ async function getDirectoryListing(
       obj.error = err;
     }
     listing.push(obj);
-    if (listing.length >= LIMITS.listing) {
-      truncated = `Too many files -- only showing ${LIMITS.listing} of them.`;
+    if (listing.length >= LISTED_LIMITS.listing) {
+      truncated = `Too many files -- only showing ${LISTED_LIMITS.listing} of them.`;
       break;
     }
   }

src/packages/next/lib/share/get-public-path-info.ts

@@ -115,6 +115,7 @@ export default async function getPublicPathInfo({
         contents: await getContents(
           rows[0].project_id,
           join(rows[0].path, relativePath),
+          rows[0].unlisted,
         ),
         projectTitle: title,
         projectAvatarImage: avatar_image_full,