Tags: mazrean/formstream
Tags
Fix: Temporary file cleanup security vulnerability (#67) * Fix temporary file cleanup security issue This commit addresses a critical security vulnerability where temporary files created during multipart form parsing were not properly cleaned up from disk, potentially leading to: - Information disclosure of sensitive uploaded data - Disk space exhaustion from accumulated temp files - File descriptor leaks in error scenarios Changes: - Added filePath field to preProcessor struct to track temp file location - Modified preProcessor.Close() to explicitly remove temp files using os.Remove() - Ensured both file handle closure and file deletion with proper error handling The existing defer hsc.Close() in Parse() ensures cleanup even on errors. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> * remove filepath field --------- Co-authored-by: Claude <noreply@anthropic.com>
Bump github.com/labstack/echo/v4 from 4.12.0 to 4.13.3 (#40) Bumps [github.com/labstack/echo/v4](https://github.com/labstack/echo) from 4.12.0 to 4.13.3. - [Release notes](https://github.com/labstack/echo/releases) - [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md) - [Commits](labstack/echo@v4.12.0...v4.13.3) --- updated-dependencies: - dependency-name: github.com/labstack/echo/v4 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>