Unrestricted file size on upload

The security rules do not validate the size of uploaded files (request.resource.size). This allows users to upload excessively large files