chore: sync infra docs and coverage

backend/src/routes/resumes.js

@@ -3,22 +3,25 @@ const multer = require('multer');
 const path = require('path');
 const fs = require('fs');
 const { v4: uuidv4 } = require('uuid');
+const sanitize = require('sanitize-filename');
 const pool = require('../database/connection');
 const { authenticateToken, requireRole } = require('../middleware/auth');
+const config = require('../config');
 
 const router = express.Router();
 
 // Configure multer for file uploads
 const storage = multer.diskStorage({
   destination: (req, file, cb) => {
-    const uploadDir = path.join(__dirname, '../../uploads/resumes');
+    const uploadDir = path.join(__dirname, '..', '..', config.uploadDir);
     if (!fs.existsSync(uploadDir)) {
       fs.mkdirSync(uploadDir, { recursive: true });
     }
     cb(null, uploadDir);
   },
   filename: (req, file, cb) => {
-    const uniqueName = `${uuidv4()}-${file.originalname}`;
+    const safeOriginal = sanitize(file.originalname);
+    const uniqueName = `${uuidv4()}-${safeOriginal || 'resume'}`;
     cb(null, uniqueName);
   }
 });