Storage And Uploads
Upload handling is kept behind shared helpers and feature-owned UI so file rules stay easy to inspect.
On this page
Where to look
| Area | Paths |
|---|---|
| Upload helpers | lib/uploads |
| Upload UI | components/uploads |
| Content editor media | features/cms/ui/editor and features/cms/shared/editor |
| Security helpers | lib/security |
Upload rules
- Validate file type and size before accepting uploads.
- Keep storage writes server-owned when credentials are required.
- Do not expose Supabase secret keys to browser code.
- Store only the metadata needed by the feature that owns the uploaded file.