umputun / weblist / 22246451487

84%

Build Type

push

github

Committed by web-flow

Commit Message

Fix upload failure in scratch containers and sanitize error messages (#39)

* fix(upload): ensure temp dir exists in scratch containers and sanitize error messages

Upload of files larger than 10MB failed in scratch-based containers because
/tmp does not exist for multipart form spill-to-disk. The raw OS error with
internal temp file paths was also leaked to the user.

- add ensureTempDir fallback chain: /tmp, /srv/tmp, rootDir/.tmp
- sanitize multipart parse errors to hide internal paths from users
- auto-exclude .tmp from file listings when rootDir fallback is used
- suppress gosec G117/G703/G706 false positives in lint config

* ci: bump golangci-lint to v2.10.1

* deps: update dependencies

* add test for sanitized multipart parse error response

Verifies that invalid multipart requests return a generic "failed to
parse form data" message without leaking internal temp file paths or
raw error details to clients.

Run Details

28 of 38 new or added lines in 2 files covered. (73.68%)

2 existing lines in 1 file now uncovered.

2036 of 2435 relevant lines covered (83.61%)

14.49 hits per line