feat: implement file extension blacklist for upload security (#27540)

2025-11-04 15:45:22 +08:00
parent f9c67621ca
commit ef1db35f80
19 changed files with 277 additions and 23 deletions
--- a/api/services/errors/file.py
+++ b/api/services/errors/file.py
@@ -11,3 +11,7 @@ class FileTooLargeError(BaseServiceError):

 class UnsupportedFileTypeError(BaseServiceError):
    pass
+
+
+class BlockedFileExtensionError(BaseServiceError):
+    description = "File extension '{extension}' is not allowed for security reasons"