Harden security: fail-closed policies, presigned URL time/expiry validation, SSRF DNS pinning, lockout cap, proxy trust config

2026-02-22 17:55:40 +08:00
parent 6ab702a818
commit fb32ca0a7d
7 changed files with 72 additions and 28 deletions
--- a/app/ui.py
+++ b/app/ui.py
@@ -743,7 +743,6 @@ def initiate_multipart_upload(bucket_name: str):


@ui_bp.put("/buckets/<bucket_name>/multipart/<upload_id>/parts")
-@limiter.exempt
@csrf.exempt
 def upload_multipart_part(bucket_name: str, upload_id: str):
    principal = _current_principal()