Andrey Antukh 29dbf9ab12
🐛 Validate content-type on management upload endpoints (#11026)
Add media type validation to upload-tempfile and upload-org-logo
management endpoints. Both stored user-supplied mtype without
checking against an allowlist. Only image types and PDF are
permitted. Non-public bucket assets now also carry
Content-Disposition: attachment to prevent inline rendering.

AI-assisted-by: mimo-v2.5-pro
2026-08-17 12:13:56 +02:00
..
2026-05-29 11:24:58 +02:00
2026-08-10 10:56:04 +02:00
2026-07-31 18:53:05 +02:00
2026-03-11 15:24:40 +01:00