Client → Multipart parser → Size limiter → MIME validator → Malware scanner → Storage (local/remote) → Job queue Instead of loading the entire file into RAM, GunnerProject uses io.TeeReader (Go) or streaming multipart (Python/Node) to write chunks directly to disk or S3.
<binary data> ------WebKitFormBoundary-- fileupload gunnerproject
| Check | Implementation | |-------|----------------| | File extension whitelist | Only .pdf, .docx, .jpg, .png allowed | | MIME verification | Reject if mime.TypeByExtension ≠ detected MIME | | AV scanning | Integrate ClamAV daemon or YARA rules | | Filename sanitization | Replace all non-alphanumeric chars with _ | | Directory traversal prevention | filepath.Base(filename) + absolute root path | Client → Multipart parser → Size limiter →