Private
Public Access
Messages can now carry an arbitrary file (MessageFile), parallel to the existing MessageImage feature rather than a refactor of it. Files serve with Content-Disposition: attachment to force a download and prevent an uploaded HTML/SVG from executing same-origin. No content-type allowlist, same 8MB cap as images for now (a separate size-limit redesign is tracked as its own issue). Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
39 lines
1.1 KiB
Python
39 lines
1.1 KiB
Python
from app.models.admin_audit_log import AdminAuditLog
|
|
from app.models.api_token import ApiToken
|
|
from app.models.base import Base
|
|
from app.models.event_subscription import EventSubscription
|
|
from app.models.invite import InviteStatus
|
|
from app.models.membership import RoomMembership, RoomRole
|
|
from app.models.message import Message
|
|
from app.models.message_file import MessageFile
|
|
from app.models.message_image import MessageImage
|
|
from app.models.message_reaction import MessageReaction
|
|
from app.models.password_reset import PasswordReset
|
|
from app.models.push_subscription import PushSubscription
|
|
from app.models.room import Room
|
|
from app.models.site_invite import SiteInvite
|
|
from app.models.smtp_settings import SmtpSettings
|
|
from app.models.user import User
|
|
from app.models.webhook_incoming import WebhookIncoming
|
|
|
|
__all__ = [
|
|
"Base",
|
|
"User",
|
|
"Room",
|
|
"RoomMembership",
|
|
"RoomRole",
|
|
"Message",
|
|
"MessageFile",
|
|
"MessageImage",
|
|
"MessageReaction",
|
|
"InviteStatus",
|
|
"PasswordReset",
|
|
"SiteInvite",
|
|
"SmtpSettings",
|
|
"PushSubscription",
|
|
"AdminAuditLog",
|
|
"ApiToken",
|
|
"WebhookIncoming",
|
|
"EventSubscription",
|
|
]
|