fix: multi-file uploads used incorrect validation

rmitchellscott · rmitchellscott · commit da9fd814f357 · 2025-09-09T16:44:34.000-06:00
diff --git a/internal/webhook/handler.go b/internal/webhook/handler.go
@@ -874,7 +874,7 @@ func processMultipleFilesForUser(jobID string, form map[string]string, userID uu
 	
 	// Validate all file paths to prevent path injection attacks
 	for i, filePath := range filePaths {
-		if err := security.ValidateFilePath(filePath); err != nil {
+		if err := security.ValidateExistingFilePath(filePath); err != nil {
 			return "backend.status.internal_error", nil, fmt.Errorf("invalid file path at index %d: %w", i, err)
 		}
 	}

Original file line number	Diff line number	Diff line change
`@@ -874,7 +874,7 @@ func processMultipleFilesForUser(jobID string, form map[string]string, userID uu`
`874`	`874`
`875`	`875`	`// Validate all file paths to prevent path injection attacks`
`876`	`876`	`for i, filePath := range filePaths {`
`877`		`- if err := security.ValidateFilePath(filePath); err != nil {`
	`877`	`+ if err := security.ValidateExistingFilePath(filePath); err != nil {`
`878`	`878`	`return "backend.status.internal_error", nil, fmt.Errorf("invalid file path at index %d: %w", i, err)`
`879`	`879`	`}`
`880`	`880`	`}`