freedomofpress/securedrop — pull request #454 by jacksingleton (2014-06-15 23:34:49+00:00)
Title: File upload plaintext hitting disk

This adds a custom flask Request implementation that forces all file uploads to happen in memory instead of potentially hitting disk.

create_secure_file_stream in request_that_secures_file_uploads.py can then be extended to use ephemeral encrypted volumes