Merge pull request #30527 from overleaf/bg-acf-fix-file-upload-leak

clean up temporary file on upload failure

GitOrigin-RevId: 0f30e6da2087e94e2e9bb95ae845af2efdaa5a7b

services/web/test/unit/src/Uploads/ProjectUploadController.test.mjs

@@ -354,7 +354,7 @@ describe('ProjectUploadController', function () {
         ctx.ProjectUploadController.uploadFile(ctx.req, ctx.res)
       })
 
-      it('should return a a non success response', function (ctx) {
+      it('should return a non success response', function (ctx) {
         expect(ctx.res.body).to.deep.equal(
           JSON.stringify({
             success: false,
@@ -362,6 +362,30 @@ describe('ProjectUploadController', function () {
           })
         )
       })
+
+      it('should remove the uploaded file', function (ctx) {
+        ctx.fs.unlink.calledWith(ctx.path).should.equal(true)
+      })
+    })
+
+    describe('with a filename that is too long', function () {
+      beforeEach(function (ctx) {
+        ctx.req.body.name = 'a'.repeat(151)
+        ctx.ProjectUploadController.uploadFile(ctx.req, ctx.res)
+      })
+
+      it('should return a non success response', function (ctx) {
+        expect(ctx.res.body).to.deep.equal(
+          JSON.stringify({
+            success: false,
+            error: 'invalid_filename',
+          })
+        )
+      })
+
+      it('should remove the uploaded file', function (ctx) {
+        ctx.fs.unlink.calledWith(ctx.path).should.equal(true)
+      })
     })
   })
 })