Document Library

Documents are stored outside the web root and are never served inline. v1 kept them in docs/files/ — inside the document root — and linked straight at them, so anyone who could guess a filename could fetch the file and the browser would render it in our own origin. Uploads now land under a generated name in a directory Apache cannot reach, their real type is verified with finfo against an allow-list, and the only way back out is a download endpoint that sends Content-Disposition: attachment with a sandboxing CSP. SVG is no longer accepted: it is a scriptable document, not an image. Uploads are capped at 50.0 MB.