HH-438: close upload and remote URL attack surfaces (#89)

* HH-438: close upload and remote URL attack surfaces * HH-438: use valid PNG in direct upload test * HH-438: align PostgreSQL upload staging schema * HH-438: run upload migrations before PostgreSQL E2E --------- Co-authored-by: Rogee <rogee@ipao.vip>
2026-08-21 20:36:52 +08:00
parent 7a9fec33c5
commit 77c91662d2
18 changed files with 1311 additions and 259 deletions
@@ -89,6 +89,12 @@ jobs:
            echo "PostgreSQL auto-assignment concurrency test did not run" >&2
            exit 1
          }
+      - name: Test production upload migrations
+        working-directory: backend
+        env:
+          GOCHAT_TEST_DB: postgres
+          GOCHAT_TEST_DB_URL: postgres://postgres:postgres@localhost:5432/gochat_test?sslmode=disable
+        run: go test ./internal/database -run '^TestUploadPostgresProductionMigration' -count=1
      - name: Test PostgreSQL E2E
        working-directory: backend
        env: