docs: consolidate repository guides and preserve audit history

2026-09-11 14:22:41 +02:00
parent 115441a409
commit 682a3028bb
404 changed files with 3402 additions and 2621 deletions
@@ -1,56 +1,5 @@
-# File Security
+# File and import security

-## Purpose
+Attachment uploads use a managed data root, validated metadata, size/type/signature checks, and safe download paths. Parser decoding is isolated and resource-bounded. URL import validates destinations and rejects unsafe redirects; DNS rebinding and actual socket binding remain a documented verification concern.

-Protect uploaded documents.
-
---
-
-# File Types
-
-Potential uploads:
-
- PDF.
- DOCX.
- Images.
- Portfolio files.
-
---
-
-# Validation
-
-Check:
-
- File type.
- File size.
- File contents.
-
-Never trust extensions.
-
---
-
-# Processing
-
-Uploaded files may contain:
-
- Malicious content.
- Embedded scripts.
- AI prompt injection.
-
-Treat as untrusted.
-
---
-
-# Storage
-
-Requirements:
-
- Secure naming.
- Access control.
- User ownership checks.
-
---
-
-# PDF Processing
-
-Never directly trust extracted text.
+Generated CV previews are sandboxed and public CV/PDF links are random, revocable, noindex, and rate-limited. Never log or document private file contents, connection strings, or bearer tokens.