Skip to content

A little signal. Less noise.

DISCOVER

Catalog Categories

CATEGORIES

Categories will appear when the source is connected.

More possibility. Less searching.

A considered collection of AI tools, trials, and opportunities.

RADAR / PostgreSQLConnection pending

ExploreCatalog

A little signal. Less noise.

Loading the catalog…

RADARGood tools open new possibilities.Explore thoughtfully. Create freely.

Skip to content

A little signal. Less noise.

DISCOVER

Catalog Categories

CATEGORIES

Categories will appear when the source is connected.

More possibility. Less searching.

A considered collection of AI tools, trials, and opportunities.

RADAR / PostgreSQLStorage available

ExploreOffer details

A little signal. Less noise.

Back to catalog

分

分片上传的大文件人人可下载:文件模块 isPrivate 在合并时被抹成 false,另有 4 个静默坑

掘金

About this offer

前阵子给一个项目做等保整改,清单里有一项"上传下载功能是否存在越权"。我本来打算半小时过完,结果在文件模块里蹲了两天。起因很滑稽:我盯着 /api/file/download/{fileId} 看了

Offer details

Provider: 掘金
Source: juejin-rss
Score: 57.31
Confidence: 54%

Source evidence

What RADAR observed and classified to build this opportunity. It is what the source published, not a verification that the offer is still active.

JuejinObserved: Oct 7, 2026Source reliability: 60%
分片上传的大文件人人可下载:文件模块 isPrivate 在合并时被抹成 false,另有 4 个静默坑. 前阵子给一个项目做等保整改,清单里有一项"上传下载功能是否存在越权"。我本来打算半小时过完,结果在文件模块里蹲了两天。起因很滑稽:我盯着 /api/file/download/{fileId} 看了
Open source

分片上传的大文件人人可下载:文件模块 isPrivate 在合并时被抹成 false,另有 4 个静默坑

Opens an external website. Availability and terms may change.

RADARGood tools open new possibilities.Explore thoughtfully. Create freely.

Real offers. Useful details.

The catalog shows persisted RADAR opportunities. Storage availability does not mean sources are verified or offers are active.