multica/server
yushen edf4c00c08 fix(upload): add file type/size validation, Content-Disposition header
- Add content type allowlist (images, PDF, text, video, audio, zip)
- Enforce 10 MB upload limit via http.MaxBytesReader
- Set Content-Disposition on S3 objects for proper download filenames
- Remove unused CloudFrontSigner.Domain() method

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-31 14:55:27 +08:00
..
cmd feat(upload): add file upload API with S3 + CloudFront signed cookies 2026-03-31 14:41:17 +08:00
internal fix(upload): add file type/size validation, Content-Disposition header 2026-03-31 14:55:27 +08:00
migrations feat(agents): reply as thread instead of top-level comment (#205) 2026-03-31 13:48:39 +08:00
pkg feat(agents): reply as thread instead of top-level comment (#205) 2026-03-31 13:48:39 +08:00
go.mod fix(upload): add file type/size validation, Content-Disposition header 2026-03-31 14:55:27 +08:00
go.sum feat(upload): add file upload API with S3 + CloudFront signed cookies 2026-03-31 14:41:17 +08:00
sqlc.yaml feat: pivot to AI-native task management platform (#232) 2026-03-20 17:55:49 +08:00