After sessions (30 Sep), this post covers file uploads: size/type gates, content sniffing, isolated storage, presigned URLs, chunked resume, malware quarantine, privacy and async processing.

सञ्चिकाआरोपणम्: A Metrical Codification of File Uploads (with English glosses)

What this post is about

File upload endpoints accept untrusted bytes. They need hard limits, type checks, safe storage and often async scanning.

Topics covered

1. Unbounded upload risk
2. Size and allow-list types at the door
3. Do not trust extensions
4. Store outside web root / buckets
5. Presigned direct upload
6. Multipart resume + idempotency
7. Malware quarantine
8. Signed URL privacy
9. Async transcode
10. Rate limits and tenant quotas

Sanskrit title

सञ्चिकाआरोपणम् = sañcikā-āropaṇam “mounting/uploading of files”.

ग्राह्यम् / Keep

१. आकारद्वारम्: max bytes early
२. allowlist प्रकार: not blocklist only
३. सर्वरनाम: random object keys
४. पृथग्भण्डारः: no web-root exec
५. मैलक्वारन्टीन: scan before publish
६. अंशकुञ्चिका: resumable upload id
७. कुटुम्बकोटा: per-tenant bytes

त्याज्यम् / Avoid

• trust Content-Type alone
• serve uploads as executable templates
• unlimited size on multiparts

पदच्छेदः
अनन्तसञ्चिका यदि उदरं पूरयेत् तदा सेवा म्रियते । सञ्चिकाआरोपणं तस्माद् मितद्वारम् ॥१॥

Word-for-word

Gloss table

English sense
File uploads without size type and virus controls are a classic outage and breach path. Treat upload as a hostile door.

Context / topic
Topic: why upload dharma.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
आकारसीमा प्रकारसूची च द्वार एव । पश्चात् परीक्षा विलम्बा ॥२॥

Word-for-word

Gloss table

English sense
Enforce max size and allow-listed content types before buffering whole bodies into memory.

Context / topic
Topic: early reject.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
नाम विस्तारं मा विश्वस । magic bytes पृथक् पश्य ॥३॥

Word-for-word

Gloss table

English sense
Do not trust client Content-Type or .jpg suffixes alone. Sniff signatures and store with server-chosen names.

Context / topic
Topic: content sniffing vs claimed type.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
भण्डारणं पृथग् बाल्टौ न exes पथे । उपयोगे न प्रत्यक्ष चालनम् ॥४॥

Word-for-word

Gloss table

English sense
Store uploads outside the web root; serve via controlled URLs. Never execute uploaded blobs as code or templates.

Context / topic
Topic: storage isolation.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
presigned URL प्रायः श्रेयान् बृहत्सञ्चिका सुये । अनुप्रयोगयन्त्रं मा मध्ये नदतु ॥५॥

Word-for-word

Gloss table

English sense
For large objects prefer direct-to-object-store uploads with short-lived signed URLs so app pods are not the pipe.

Context / topic
Topic: direct upload patterns.

वृत्तमिति: एकादशाक्षराः पादाः।

पदच्छेदः
अंशेषु अपलोड् इदमर्थकुञ्चिकया । पुनर्यत्ने द्विः मा पूरय ॥६॥

Word-for-word

Gloss table

English sense
Chunked uploads need an upload id and resume rules so flaky nets do not create duplicates.

Context / topic
Topic: multipart resume.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
मैलपरीक्षा क्वारन्टीने च सज्जा । विश्वस्तपुष्पं मा पूर्वम् ॥७॥

Word-for-word

Gloss table

English sense
Scan before making files widely readable. Quarantine until clean when risk warrants.

Context / topic
Topic: malware pipeline.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
गोप्यसञ्चिका लेखात् URL च रक्ष्या । सार्वजनिकबाल्टु मा गुह्यम् ॥८॥

Word-for-word

Gloss table

English sense
Do not log signed URLs with long life; do not put PII objects in world-readable buckets.

Context / topic
Topic: privacy and URL leakage.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
प्रतिमासंपीडनं async पङ्क्त्या । अनुरोधतन्तौ मा गुरुकार्यम् ॥९॥

Word-for-word

Gloss table

English sense
Virus scan thumbnails and virus heavy CPU belong on workers not the upload request thread.

Context / topic
Topic: async post-process. Links to queues.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
सीमादरः आर्रोपणद्वारं रक्षतु कोलाहलिना । बहुकिरायः कुटुम्बकोटा वहतु ॥१०॥

Word-for-word

Gloss table

English sense
Rate-limit uploads and enforce per-tenant storage quotas so one customer cannot fill the bucket.

Context / topic
Topic: rate limit + tenancy links.

सन्धिः: सीमादरः + बहुकिरायविवेकः.

वृत्तमिति: एकादशाक्षराः पादाः।

पदच्छेदः
आकारः प्रकारः नाम भण्डारं मैलं पञ्चकम् । एभिः सञ्चिकाआरोपणं मितद्वारसमन्वितम् ॥११॥

Word-for-word

Gloss table

English sense
Five limbs: size caps, type allow-lists, server-side names, isolated storage and scan-before-publish.

Context / topic
Topic: checklist.

वृत्तमिति: ८-८-८-८।

पदच्छेदः
इति सञ्चिकाआरोपणसारो मितद्वारसमन्वितः । मितं द्वारं क्रियायोग्यं तन्त्रधर्मः स उच्यते ॥१२॥

Word-for-word

Gloss table

English sense
Closing: every upload is untrusted input until proven otherwise.

Context / topic
Topic: close.

उपसंहारन्यायः: द्वारं बध्नाहि; नाम स्वयं देहि; मैलं पूर्वं पश्य।

वृत्तमिति: ८-८-८-८।

१. Hostile door
२. Size/type
३. Sniff vs claim
४. Isolated store
५. Presigned
६. Chunk resume
७. Malware
८. Privacy URLs
९. Async work
१०. Rate/tenant
११. Five limbs
१२. Close

1. Prior: rate limit 2026-08-13; tenancy 2026-09-08; queues 2026-07-29; privacy logs 2026-07-11.
2. Domain: secure file upload pipelines.
3. Bilingual word-for-word + sense.
4. Style: no em dash; no Oxford comma in English clauses.