tech cf7d3d5618 fix: use streaming and add path validation ...

- Replace fs.readFileSync() with fs.createReadStream() to prevent memory exhaustion
- Export validatePath() from fs-utils.ts
- Use validatePath() to validate full path including project and version parameters
- Fix incomplete path traversal protection
- Add filename encoding in Content-Disposition header

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

2026-03-04 02:01:38 +08:00

1.5 KiB

Raw Blame History

View Raw