fix(security): harden deployment configuration boundaries

2026-08-15 17:28:12 +08:00
parent f3737c80be
commit 0a91cafc4e
10 changed files with 125 additions and 5 deletions
@@ -147,7 +147,8 @@ export class MediaService {
    file: File,
    idempotentReplay: boolean,
  ): Promise<CreateUploadIntentResponse> {
-    const expiresIn = 600;
+    // 缩短上传 URL 有效期至 120 秒，降低截获后滥用的风险窗口。
+    const expiresIn = 120;
    let uploadUrl: string;
    try {
      uploadUrl = await this.storage.createUploadUrl(