marcel/familienarchiv
1
0
Fork 0
Code Issues 105 Pull Requests 2 Actions Packages Projects Releases Wiki Activity

security(import): validate PDF magic bytes before S3 upload #618

Merged
marcel merged 10 commits from worktree-feat+issue-529-pdf-magic-bytes into main 2026-05-19 09:45:04 +02:00
Conversation 65 Commits 10 Files Changed 10 +6 -4
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit b38b8c39b8 - Show all commits

10
frontend/src/routes/admin/system/ImportStatusCard.svelte
View File

@@ -55,10 +55,10 @@ function reasonLabel(code: string): string {
<p class="mt-1 text-xs text-green-800">{m.admin_system_import_status_done()}</p>
</div>
{#if importStatus.skipped > 0}
<details class="mb-4 rounded-sm border border-warning/40 bg-warning/10 p-4 text-warning">
<details class="mb-4 rounded-sm border border-warning/40 bg-warning/10 p-4 text-amber-900">
<summary class="flex cursor-pointer list-none items-center gap-2">
<svg
class="details-chevron h-4 w-4 shrink-0 transition-transform"
class="details-chevron h-4 w-4 shrink-0 motion-safe:transition-transform"
viewBox="0 0 16 16"
fill="none"
stroke="currentColor"
@@ -78,8 +78,10 @@ function reasonLabel(code: string): string {
</div>
</summary>
<ul class="mt-3 space-y-1">
{#each importStatus.skippedFiles as { filename, reason } (filename)}
<li class="font-mono text-xs text-ink-2">{filename} — {reasonLabel(reason)}</li>
{#each importStatus.skippedFiles as skipped, i (i)}
<li class="font-mono text-sm text-ink-2">
{skipped.filename} — {reasonLabel(skipped.reason)}
</li>
{/each}
</ul>
</details>