cesnimda/jobtrackingapp
1
0
Fork 0
Code Issues Pull Requests 1 Actions Packages Projects Releases Wiki Activity

feat: complete release readiness work

Browse Source 
- consolidate API ownership and remove dead vendor code

- add Stripe billing, learning paths, and public CV hardening

- add migration, recovery, security, audit, and browser gates
This commit is contained in:
cesnimda
2026-07-31 16:54:16 +02:00
parent a23c3dfc97
commit ce76046a29
1634 changed files with 6889 additions and 135429 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/uploads.md
+6 -1
View File
@@ -1,3 +1,8 @@
# uploads
TODO: Complete documentation.
Uploads are tenant-scoped through their parent application. File names are normalized with
`Path.GetFileName` and stored under generated names inside the configured attachments root. The API
enforces allowed types, a per-file size limit, and the account's total storage entitlement.
Downloads resolve the owned database record before opening a file. Files selected for AI are explicit;
uploading alone does not send content to a provider.