File Browser TUS Negative Upload-Length Fires Post-Upload Hooks Prematurely

Summary The TUS resumable upload handler parses the Upload-Length header as a signed 64-bit integer without validating that the value is non-negative. When a negative value is supplied e.g. -1, the first PATCH request immediately satisfies the completion condition newOffset = uploadLength → 0 = -...