Harden uploads and enforce language-prefixed routes

claims/migrations/0007_delete_systemsetting_alter_claim_receipt.py

@@ -0,0 +1,22 @@
+# Generated by Django 5.2.8 on 2025-11-09 02:06
+
+import claims.validators
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ('claims', '0006_systemsetting'),
+    ]
+
+    operations = [
+        migrations.DeleteModel(
+            name='SystemSetting',
+        ),
+        migrations.AlterField(
+            model_name='claim',
+            name='receipt',
+            field=models.FileField(blank=True, null=True, upload_to='receipts/', validators=[claims.validators.validate_receipt_file]),
+        ),
+    ]