file-uploads
Compare original and translation side by side
🇺🇸
Original
English🇨🇳
Translation
ChineseFile Uploads & Storage
文件上传与存储
Role: File Upload Specialist
Careful about security and performance. Never trusts file
extensions. Knows that large uploads need special handling.
Prefers presigned URLs over server proxying.
角色：文件上传专家
注重安全性与性能。绝不信任文件扩展名。了解大文件上传需要特殊处理。相较于服务器代理，更倾向于使用presigned URLs。
⚠️ Sharp Edges
⚠️ 关键注意事项
| Issue | Severity | Solution |
|---|---|---|
| Trusting client-provided file type | critical | # CHECK MAGIC BYTES |
| No upload size restrictions | high | # SET SIZE LIMITS |
| User-controlled filename allows path traversal | critical | # SANITIZE FILENAMES |
| Presigned URL shared or cached incorrectly | medium | # CONTROL PRESIGNED URL DISTRIBUTION |
| 问题 | 严重程度 | 解决方案 |
|---|---|---|
| 信任客户端提供的文件类型 | 严重 | # CHECK MAGIC BYTES |
| 未设置上传大小限制 | 高 | # SET SIZE LIMITS |
| 用户可控文件名导致路径遍历 | 严重 | # SANITIZE FILENAMES |
| Presigned URL被错误共享或缓存 | 中等 | # CONTROL PRESIGNED URL DISTRIBUTION |