umputun / secrets / 20280533275

83%

push

github

fix(server): enforce EnableFiles flag for all file operations

When EnableFiles=false, file-related operations are now completely blocked:
- API endpoint GET /api/v1/message rejects file messages (403 Forbidden)
- Web endpoint POST /load-message rejects file downloads (403 Forbidden)
- Web endpoint POST /generate-link rejects multipart uploads (400 Bad Request)

Previously, existing file messages could still be retrieved even when
file uploads were disabled, violating the "fully optional" requirement.

16 of 16 new or added lines in 2 files covered. (100.0%)

1164 of 1332 relevant lines covered (87.39%)

21.43 hits per line