Task/project duplication and the Todoist migration were passing stored or API-reported sizes into NewAttachment. Derive the size from the actual buffered content so every caller matches the hardened boundary behaviour (GHSA-qh78-rvg3-cv54 defence-in-depth). |
||
|---|---|---|
| .. | ||
| main_test.go | ||
| todoist.go | ||
| todoist_test.go | ||