2 Commits

Author	SHA1	Message	Date
Tianyang	13789cc0b4	fix: remove duplicate /health route, escape extracted text, validate uploads, handle binary decode ... - main.py: remove duplicate /health endpoint definition - text_extract.py: HTML-escape extracted plain text before indexing so raw markup in uploaded documents can't render as live HTML via search snippets (stored XSS fix) - document_service.py: base64-encode content when UTF-8 decoding fails instead of raising UnicodeDecodeError (500) on binary files; add upload validation for file extension (allowlist) and size (10MB max) - routers/documents.py: map new validation errors to HTTP 400 with a clear detail message instead of letting them 500 - add/extend tests covering escaping, binary get_document, and upload validation rejection + acceptance paths	2026-08-01 08:59:34 +08:00
Tianyang	6a286d422d	feat: add DocumentService coordinating MinIO writes and search indexing	2026-08-01 02:28:58 +08:00