Security

Security baseline

• Uploads are checked by extension and detected MIME type.
• Inputs and outputs live outside the public web directory.
• Downloads use random tokens and expiry times.
• Converter processes have execution timeouts and should run in restricted containers in production.
• Admin, API and download URLs are excluded from indexing.

Required production controls

Enable HTTPS, firewall rules, PHP function restrictions, ClamAV scanning, Nginx upload limits, Supervisor process management and scheduled cleanup. Public URL importing requires dedicated SSRF protection and is intentionally excluded from the current release.