fix(security): harden auth and request limits

2026-08-05 06:50:10 +00:00 · 2026-07-05 23:43:49 +08:00
parent 12af18e3a3
commit d9a36fefe6
12 changed files with 315 additions and 30 deletions
@@ -124,6 +124,10 @@ async function processAttachmentUpload(
  }

  const path = getAttachmentObjectKey(cipherId, attachment.id);
+  if (await getBlobObject(env, path)) {
+    return errorResponse('Attachment file has already been uploaded', 409);
+  }
+
  try {
    await putBlobObject(env, path, upload.body, {
      size: upload.size,