Security
File Upload Security in Rust Checking Type Size and Name
Treat every upload as hostile: limit the size, sniff the real content type, ignore the client filename, store outside the web root under generated names, scan where needed and serve with safe headers.
5 min read
