security fixes (fixed) - #2

micfogas wants to merge 4 commits into

patch 1: Added MAX_BUFFER_SIZE limit (2MB) inside chunk ingestion to prevent buffer bloat and OOM denial-of-service risks.

Merge remote-tracking branch 'refs/remotes/origin/main'