Phase 3: Document Upload #2

Closed
opened 2026-02-02 19:58:44 +01:00 by qwc · 0 comments
Owner

Archive detection + extraction (zip, tar.gz, tar.bz2) with security checks (zip-slip, size limits). Upload handler (multipart form) + upload template. Wire: extract archive → create version record → store files on disk.

Tests needed:

  • Unit: archive format detection, zip/tar.gz extraction, zip-slip prevention, symlink rejection
  • Integration: POST multipart upload via httptest → version in DB → files on disk → GET serves them
Archive detection + extraction (zip, tar.gz, tar.bz2) with security checks (zip-slip, size limits). Upload handler (multipart form) + upload template. Wire: extract archive → create version record → store files on disk. **Tests needed:** - Unit: archive format detection, zip/tar.gz extraction, zip-slip prevention, symlink rejection - Integration: POST multipart upload via httptest → version in DB → files on disk → GET serves them
qwc closed this issue 2026-02-02 20:04:03 +01:00
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
qwc-open/asiakirjat#2
No description provided.