[backend] BulkImportController.import() accepts CSV as a raw body string with no size limit

[Wilfred007]

Description

BulkImportController.import() reads CSV content directly from request.body.csv as a string with no enforced maximum length, risking memory pressure (OOM) on very large uploads since the whole string is held in memory before parsing.

Where

backend/src/controllers — BulkImportController.import

Acceptance Criteria

• Enforce a maximum body size at the middleware level for this route
• Add a test for the oversized-payload rejection

[leocagli]

Hi, I'd like to fix BulkImportController.import() to reject raw CSV body and require multipart/form-data with proper validation. Could you assign me?

[Joeloo1]

@Joeloo1 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I’d like to work on this issue. Please assign it to me. Thanks!

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Joeloo1 to this issue.

[ndyugwu]

@ndyugwu has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

let me at this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @ndyugwu to this issue.

[Ryjen1]

@Ryjen1 has applied to work on this issue as part of the Stellar Wave Program's 6th wave.

I would like to work on this issue. Happy to contribute

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Ryjen1 to this issue.

[drips-wave]

Congratulations, @Ryjen1! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on June 30, 2026.

🧑‍💻 @Ryjen1: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊