Mondo Diaz af66fd5845 Add security fixes: SHA256 hash validation and streaming file size enforcement ...

- Add field_validator to ResumableUploadInitRequest to validate expected_hash
  is a valid 64-character lowercase hex SHA256 hash (normalizes to lowercase)
- Add FileSizeExceededError exception for file size limit violations
- Enforce file size limits in storage layer during streaming (prevents
  Content-Length header spoofing)
- Add FileSizeExceededError handler in upload endpoint returning HTTP 413
- Add node_modules and frontend/dist to .gitignore

2026-01-05 15:43:19 -06:00

553 B

Raw Blame History

View Raw