Secure upload

[solverat]

Q	A
Bug fix?	no
New feature?	yes
BC breaks?	no
Deprecations?	no
Fixed tickets	---

Docs: https://github.com/dachcom-digital/pimcore-formbuilder/blob/secure_upload/docs/80_FileUpload.md#security

• Enhance upload handling for FineUploadAdapter and DropZoneAdapter:

  • Added support for a fieldReference parameter during uploads, deletions, and chunk combining.
  • Updated methods to include a default statusCode in JSON responses for better status reporting.
  • Improved error handling and validation during upload processes.

• Introduce UploadErrorException:

  • Created a custom exception class to handle upload-related errors.

• Extend FileStream functionalities:

  • Implemented MIME type validation for uploaded files and chunk merging processes.
  • Added field reference validation and restriction checks (e.g., size limits and allowed MIME types).
  • Enhanced methods for handling chunked uploads and file deletions with field references.
  • Added reusable helper functions for upload validations.

• Update DynamicMultiFileType:

  • Added a listener for POST_SET_DATA to manage dynamic multi-file form modifications.
  • Enhanced form options with fieldReference for better context specificity.

• Add security configurations:

  • Introduced security node to configuration for enabling/disabling field reference validation and server-side MIME type validation.

• Improve translations:

  • Expanded description for allowed_extensions to cover MIME type specification when server-side validation is active.