yushen c27b7bab5e fix(upload): sniff content type, sanitize filename, add key prefix ...

- Use http.DetectContentType() instead of trusting client-declared MIME type
- Sanitize quotes in filename for Content-Disposition header injection
- Add uploads/ prefix to S3 keys for better organization

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-31 14:58:52 +08:00

..

cmd

feat(upload): add file upload API with S3 + CloudFront signed cookies

2026-03-31 14:41:17 +08:00

internal

fix(upload): sniff content type, sanitize filename, add key prefix

2026-03-31 14:58:52 +08:00

migrations

feat(agents): reply as thread instead of top-level comment (#205)

2026-03-31 13:48:39 +08:00

pkg

feat(agents): reply as thread instead of top-level comment (#205)

2026-03-31 13:48:39 +08:00

go.mod

fix(upload): add file type/size validation, Content-Disposition header

2026-03-31 14:55:27 +08:00

go.sum

feat(upload): add file upload API with S3 + CloudFront signed cookies

2026-03-31 14:41:17 +08:00

sqlc.yaml

…