Allows saving of files to filesystem

[KaiVolland]

This introduces interfaces and methods to upload files to the filesystem instead of adding them as bytearray to the DB.

• Includes a migration to add the path property to the File entity.
• Includes config options to the UploadProperties
  • path --> The basePath of the upload directory
  • maxSize --> The maximum size of upload (currently not used)

BREAKING CHANGE:

• Removes validateFile from the FileUtil and moved validation to the BaseFileService -> see Readd method validateFile including a note about deprecation #316

[LukasLohoff]

Looks great! Few questions on validation of fileName, see comments

[marcjansen]

Can we include file content validation (is this actually an image...) here or is this sth. for another day?

[KaiVolland]

Can we include file content validation (is this actually an image...) here or is this sth. for another day?

We do contentType validation. I don't know if content validation adds more security/functionality and if its even doable with an acceptable effort.

[marcjansen]

Thanks for e55e17e, I do not know Tika, but this looks solid. It would be good to test this with a variety of different uploads / browsers, because !mediaType.toString().equals(contentType) might give false positives.

The easiest thing would surely be to have this being configurable, whether this validation should happen. And probably also being easily able to plug in a common project validation. This all might e out of scope if this issue.

Please proceed as you like, either including the (configurable) validation or by letting it out. My 2 ¢

[marcjansen]

Another general question: Will this scale well? I still remember that filesystems and containerized systems aren't the best friends. Is the behavior configurable, where the actual file ends up (database, filesystem)?

[LukasLohoff]

👍