chore(backend): ignore runtime storage in git/docker, remove dead getSafeFilename

Follow-ups from the codex review of #834:

- .gitignore: backend/storage/ is runtime-generated (media, previews,
  thumbnails, business docs) and was only partially ignored — E2E runs
  left it dangling as untracked, which is how ~12 MB of artifacts nearly
  landed in a commit. Ignore the whole directory (nothing under it is
  tracked); replaces the narrower business-docs rule.
- backend/.dockerignore: the granular storage/* rules missed
  storage/previews, so locally generated previews were copied into
  production images. Exclude storage entirely — the Dockerfile creates
  the needed directories itself (RUN mkdir -p, Dockerfile:96).
- fileSecurityUtils.js: remove getSafeFilename — zero callers across the
  repo, and its private extension whitelist silently drifted from the
  real validation paths (see #834), which is exactly the trap dead
  security code sets.

This commit is contained in:

Paul Nothaft

2026-07-19 00:40:53 +02:00

parent 14d5fa6ca5

commit 2f4b8a64c0

3 changed files with 4 additions and 25 deletions

backend/.dockerignore

+1 -3

View File

@@ -1,9 +1,7 @@
 node_modules
 npm-debug.log
 .env
 storage/events/active/*
 storage/events/archived/*
 storage/thumbnails/*
 storage
 data/*.db
 logs/*
 coverage