[backend] add size limit for the sha256 file