fix(preprocess): verify canonical generations and cleanup

2026-07-12 06:18:18 +02:00
parent 4a29086fe4
commit 7d41c4cefc
6 changed files with 86 additions and 18 deletions
@@ -29,8 +29,9 @@ class S3EvidenceSource:
        if (not bucket_valid or bucket_is_ip
                or any(value < 1 for value in (max_bytes, max_objects, max_pages, page_size))):
            raise ValueError("S3 evidence limits and bucket must be non-empty and positive")
-        if prefix.startswith("/"):
-            raise ValueError("S3 prefix must not start with a slash")
+        if (prefix.startswith("/") or len(prefix.encode()) > 1024
+                or any(ord(char) < 32 or ord(char) == 127 for char in prefix)):
+            raise ValueError("S3 prefix is invalid")
        if endpoint_url:
            parsed = urlsplit(endpoint_url)
            if parsed.username or parsed.password: