FileUploadTagger
Constants
Form-style carriage: a genuine browser file upload arrives as a
file param or a multipart form field. JSON/body media fields are
almost always a URL/reference string.
Media words that frequently name a reference — a profile-image URL,
an avatar link — inside a JSON/body payload rather than an uploaded
file. Treated as an upload only when carried as multipart form data
(a file/form param) or corroborated by an upload-ish URL, so a
JSON {"image": "https://..."} field (e.g. RealWorld's
PUT /user) is not mis-tagged as a file upload.
media is matched only as a whole /media path segment, never as a
loose sub-token. As a loose token (split on -/_) it fired on
config/feature routes that merely contain the word but upload nothing:
/settings/media-path (a media-directory setting, e.g. koel),
/social-media, /media-library. A standalone /media collection
(POST /media) still tags.
Param names that denote an actual uploaded file regardless of how the
value is carried — a filename, an attachment, a multipart
boundary. Safe to flag on any writable param type.