fix(ai-apis): reject text inputs that are longer than 64K chars

Signed-off-by: Julien Veyssier <[email protected]>

Author: julien-nc

core/Controller/TextProcessingApiController.php

@@ -104,6 +104,9 @@ public function taskTypes(): DataResponse {
 	#[NoAdminRequired]
 	#[UserRateLimit(limit: 20, period: 120)]
 	public function schedule(string $input, string $type, string $appId, string $identifier = ''): DataResponse {
+		if (strlen($input) > 64_000) {
+			return new DataResponse(['message' => $this->l->t('Input text is too long')], Http::STATUS_BAD_REQUEST);
+		}
 		try {
 			$task = new Task($type, $input, $appId, $this->userId, $identifier);
 		} catch (InvalidArgumentException) {

core/Controller/TranslationApiController.php

@@ -67,6 +67,9 @@ public function languages(): DataResponse {
 	 * @AnonRateThrottle(limit=10, period=120)
 	 */
 	public function translate(string $text, ?string $fromLanguage, string $toLanguage): DataResponse {
+		if (strlen($text) > 64_000) {
+			return new DataResponse(['message' => $this->l->t('Input text is too long')], Http::STATUS_BAD_REQUEST);
+		}
 		try {
 			$translation = $this->translationManager->translate($text, $fromLanguage, $toLanguage);