#399

backend/app/controllers/post_imports_controller.rb

@@ -61,6 +61,13 @@ class PostImportsController < ApplicationController
     columns = Array(value['columns'])
     rows = Array(value['rows'])
     raise ArgumentError, '解析結果の形式が不正です．' unless columns.all?(Hash) && rows.all?(Hash)
+    raise ArgumentError, '取込件数が多すぎます．' if rows.length > PostImportSourceParser::MAX_ROWS
+    raise ArgumentError, '列数が多すぎます．' if columns.length > 50
+    unless rows.all? { |row| Array(row['values']).length <= columns.length &&
+                               Array(row['values']).all? { _1.is_a?(String) && _1.bytesize <= PostImportSourceParser::MAX_CELL_BYTES } }
+      raise ArgumentError, '解析結果のセルが不正です．'
+    end
+    raise ArgumentError, '解析結果が大きすぎます．' if rows.sum { Array(_1['values']).sum(&:bytesize) } > PostImportSourceParser::MAX_BYTES
 
     { columns: columns.map { |column| column.slice('key', 'label') },
       rows: rows.map { |row| { source_row: row['source_row'], values: Array(row['values']) } } }