2 Commits

Author	SHA1	Message	Date
Tianyang	13789cc0b4	fix: remove duplicate /health route, escape extracted text, validate uploads, handle binary decode ... - main.py: remove duplicate /health endpoint definition - text_extract.py: HTML-escape extracted plain text before indexing so raw markup in uploaded documents can't render as live HTML via search snippets (stored XSS fix) - document_service.py: base64-encode content when UTF-8 decoding fails instead of raising UnicodeDecodeError (500) on binary files; add upload validation for file extension (allowlist) and size (10MB max) - routers/documents.py: map new validation errors to HTTP 400 with a clear detail message instead of letting them 500 - add/extend tests covering escaping, binary get_document, and upload validation rejection + acceptance paths	2026-08-01 08:59:34 +08:00
Tianyang	5b4bc4e719	feat: add documents router for list/get/save/delete/upload	2026-08-01 02:32:42 +08:00