Merge pull request #3600 from pixelfed/staging

Update update_credentials endpoint, enforce validator limits

app/Http/Controllers/Api/ApiV1Controller.php

@@ -217,10 +217,10 @@ class ApiV1Controller extends Controller
 
 		$this->validate($request, [
 			'avatar'			=> 'sometimes|mimetypes:image/jpeg,image/png|min:10|max:' . config('pixelfed.max_avatar_size'),
-			'display_name'      => 'nullable|string',
-			'note'              => 'nullable|string',
+			'display_name'      => 'nullable|string|max:30',
+			'note'              => 'nullable|string|max:200',
 			'locked'            => 'nullable',
-			'website'			=> 'nullable',
+			'website'			=> 'nullable|string|max:120',
 			// 'source.privacy'    => 'nullable|in:unlisted,public,private',
 			// 'source.sensitive'  => 'nullable|boolean'
 		], [