fix(uploads): prevent cross-photo contamination from filename collisions and non-atomic writes (#931) (stable) (#934)

* fix(uploads): prevent cross-photo contamination from filename collisions and non-atomic writes (#931)

* test: pin the suffixed photo filename format in the NFD pipeline suite (#931)

* chore(deps): promote p-limit to a direct dependency for the watermark limiter (#931)

* test: make the suffix-uniqueness check deterministic-in-practice (#931)

* fix(uploads): widen the anti-collision suffix to 48 bits (#931)

* fix(uploads): hide staging files from list() + share one watermark limiter process-wide (#931)

* fix(uploads): reclaim orphaned staging files + revalidate watermark settings in queued jobs (#931)

---------

Co-authored-by: Paul Nothaft <[email protected]>

This commit is contained in:

Paul Nothaft

2026-08-01 12:29:23 +02:00

committed by

GitHub

co-authored by

Paul Nothaft

parent 7974b9c6d7

commit fc99e2b233

10 changed files with 246 additions and 35 deletions

									
										backend/package.json
									
		+1
		
												View File
												
				@@ -51,6 +51,7 @@

				    "node-stream-zip": "^1.15.0",

				    "nodemailer": "^9.0.1",

				    "otplib": "^12.0.1",

				    "p-limit": "^3.1.0",

				    "pdf-lib": "^1.17.1",

				    "pdfkit": "^0.17.2",

				    "pg": "^8.16.3",