fix: Secure S3 attachments, bump SDK, refactoring

Closes #673
2025-12-16 09:13:18 +03:00 · 2024-11-12 15:58:22 +01:00
parent 950a070589
commit 850f6df0ac
27 changed files with 2180 additions and 702 deletions
--- a/server/config/routes.js
+++ b/server/config/routes.js
@@ -135,13 +135,21 @@ module.exports.routes = {
  'PATCH /api/notifications/:ids': 'notifications/update',

  'GET /user-avatars/*': {
-    fn: staticDirServer('/user-avatars', () => path.resolve(sails.config.custom.userAvatarsPath)),
+    fn: staticDirServer('/user-avatars', () =>
+      path.join(
+        path.resolve(sails.config.custom.uploadsBasePath),
+        sails.config.custom.userAvatarsPathSegment,
+      ),
+    ),
    skipAssets: false,
  },

  'GET /project-background-images/*': {
    fn: staticDirServer('/project-background-images', () =>
-      path.resolve(sails.config.custom.projectBackgroundImagesPath),
+      path.join(
+        path.resolve(sails.config.custom.uploadsBasePath),
+        sails.config.custom.projectBackgroundImagesPathSegment,
+      ),
    ),
    skipAssets: false,
  },