Skip to content

Tags: mazrean/formstream

Tags

v1.1.3

Toggle v1.1.3's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fix: Temporary file cleanup security vulnerability (#67)

* Fix temporary file cleanup security issue

This commit addresses a critical security vulnerability where temporary files created during multipart form parsing were not properly cleaned up from disk, potentially leading to:
- Information disclosure of sensitive uploaded data
- Disk space exhaustion from accumulated temp files
- File descriptor leaks in error scenarios

Changes:
- Added filePath field to preProcessor struct to track temp file location
- Modified preProcessor.Close() to explicitly remove temp files using os.Remove()
- Ensured both file handle closure and file deletion with proper error handling

The existing defer hsc.Close() in Parse() ensures cleanup even on errors.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>

* remove filepath field

---------

Co-authored-by: Claude <noreply@anthropic.com>

v1.1.2

Toggle v1.1.2's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Bump github.com/labstack/echo/v4 from 4.12.0 to 4.13.3 (#40)

Bumps [github.com/labstack/echo/v4](https://github.com/labstack/echo) from 4.12.0 to 4.13.3.
- [Release notes](https://github.com/labstack/echo/releases)
- [Changelog](https://github.com/labstack/echo/blob/master/CHANGELOG.md)
- [Commits](labstack/echo@v4.12.0...v4.13.3)

---
updated-dependencies:
- dependency-name: github.com/labstack/echo/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

v1.1.1

Toggle v1.1.1's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Merge pull request #26 from mazrean/dependabot/github_actions/codecov…

…/codecov-action-4.4.1

Bump codecov/codecov-action from 4.4.0 to 4.4.1

v1.1.0

Toggle v1.1.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Merge pull request #13 from mazrean/feat/error-unwrapper

unwrap echo error

v1.0.0

Toggle v1.0.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Merge pull request #12 from mazrean/doc/godoc

write godoc

v0.1.0

Toggle v0.1.0's commit message

Verified

This commit was created on GitHub.com and signed with GitHub’s verified signature.
Merge pull request #11 from mazrean/dev/http-benchmark

ベンチマーク、テストの強化