fix(uploads): prevent cross-photo contamination from filename collisions and non-atomic writes (#931) (#933)

* fix(uploads): prevent cross-photo contamination from filename collisions and non-atomic writes (#931)

* test: pin the suffixed photo filename format in the NFD pipeline suite (#931)

* test: make the suffix-uniqueness check deterministic-in-practice (#931)

* fix(uploads): widen the anti-collision suffix to 48 bits (#931)

* fix(uploads): hide staging files from list() + share one watermark limiter process-wide (#931)

* fix(uploads): reclaim orphaned staging files + revalidate watermark settings in queued jobs (#931)

---------

Co-authored-by: Paul Nothaft <[email protected]>
This commit is contained in:
Paul Nothaft
2026-08-01 12:29:12 +02:00
committed by GitHub
co-authored by Paul Nothaft
parent 2581f4af70
commit defeae9634
8 changed files with 242 additions and 31 deletions
Binary file not shown.