fix: harden dependencies and downstream delivery

2026-07-15 12:05:24 +08:00
parent 9bbfb72be6
commit a758672436
17 changed files with 418 additions and 57 deletions
@@ -48,7 +48,17 @@ export class FilesController {
  }

  @Post('upload')
-  @UseInterceptors(FileInterceptor('file', { limits: { fileSize: 20 * 1024 * 1024 } }))
+  @UseInterceptors(FileInterceptor('file', {
+    limits: {
+      fileSize: 20 * 1024 * 1024,
+      files: 1,
+      fields: 4,
+      parts: 5,
+      fieldNameSize: 100,
+      fieldSize: 1024,
+      headerPairs: 100,
+    },
+  }))
  upload(@UploadedFile() file: UploadedMultipartFile, @Body('purpose') purpose: string, @Body('prefix') prefix?: string, @TenantId() tenantId?: string) {
    if (!file) {
      throw new BadRequestException('Upload file is required');