chore: 优化代码质量和安全性\n\n- 删除未使用的 @aws-sdk/lib-storage 依赖，简化依赖\n- 修复重复导入 database 模块\n- 消除 formatSize 重复代码，提取为共享函数\n- 修复 verify.html XSS 漏洞，添加 HTML 转义\n- 更新 index.html 过时文案（断点续传→直连上传）

backend/storage.js

@@ -1,9 +1,21 @@
 const { S3Client, PutObjectCommand, GetObjectCommand, DeleteObjectsCommand, ListObjectsV2Command, HeadObjectCommand } = require('@aws-sdk/client-s3');
-const { Upload } = require('@aws-sdk/lib-storage');
 const fs = require('fs');
 const path = require('path');
 const { UserDB } = require('./database');
 
+// ===== 工具函数 =====
+
+/**
+ * 格式化文件大小
+ */
+function formatFileSize(bytes) {
+  if (bytes === 0) return '0 B';
+  const k = 1024;
+  const sizes = ['B', 'KB', 'MB', 'GB', 'TB'];
+  const i = Math.floor(Math.log(bytes) / Math.log(k));
+  return Math.round(bytes / Math.pow(k, i) * 100) / 100 + ' ' + sizes[i];
+}
+
 // ===== 统一存储接口 =====
 
 /**
@@ -309,17 +321,6 @@ class LocalStorageClient {
     // 更新内存中的值
     this.user.local_storage_used = newUsed;
   }
-
-  /**
-   * 格式化文件大小
-   */
-  formatSize(bytes) {
-    if (bytes === 0) return '0 B';
-    const k = 1024;
-    const sizes = ['B', 'KB', 'MB', 'GB', 'TB'];
-    const i = Math.floor(Math.log(bytes) / Math.log(k));
-    return Math.round(bytes / Math.pow(k, i) * 100) / 100 + ' ' + sizes[i];
-  }
 }
 
 // ===== OSS存储客户端 =====
@@ -516,55 +517,34 @@ class OssStorageClient {
   }
 
   /**
-   * 上传文件（支持分片上传）
+   * 上传文件（直接上传，简单高效）
+   * @param {string} localPath - 本地文件路径
+   * @param {string} remotePath - 远程文件路径
    */
   async put(localPath, remotePath) {
-    let fileStream = null;
-
     try {
       const key = this.getObjectKey(remotePath);
       const bucket = this.user.oss_bucket;
       const fileSize = fs.statSync(localPath).size;
 
       // 创建文件读取流
-      fileStream = fs.createReadStream(localPath);
+      const fileStream = fs.createReadStream(localPath);
 
-      // 使用 AWS SDK 的 Upload 类处理分片上传
-      const upload = new Upload({
-        client: this.s3Client,
-        params: {
-          Bucket: bucket,
-          Key: key,
-          Body: fileStream
-        },
-        queueSize: 3, // 并发分片数
-        partSize: 5 * 1024 * 1024 // 5MB 分片
+      // 直接上传（AWS S3 支持最大 5GB 的单文件上传）
+      const command = new PutObjectCommand({
+        Bucket: bucket,
+        Key: key,
+        Body: fileStream
       });
 
-      // 监听上传进度（可选）
-      upload.on('httpUploadProgress', (progress) => {
-        if (progress && progress.loaded && progress.total) {
-          const percent = Math.round((progress.loaded / progress.total) * 100);
-          // 只在较大文件时打印进度（避免日志过多）
-          if (progress.total > 10 * 1024 * 1024 || percent % 20 === 0) {
-            console.log(`[OSS存储] 上传进度: ${percent}% (${key})`);
-          }
-        }
-      });
-
-      await upload.done();
+      await this.s3Client.send(command);
       console.log(`[OSS存储] 上传成功: ${key} (${this.formatSize(fileSize)})`);
 
-      // 上传成功后，手动关闭流
-      if (fileStream && !fileStream.destroyed) {
+      // 关闭流
+      if (!fileStream.destroyed) {
         fileStream.destroy();
       }
     } catch (error) {
-      // 确保流被关闭，防止泄漏
-      if (fileStream && !fileStream.destroyed) {
-        fileStream.destroy();
-      }
-
       console.error(`[OSS存储] 上传失败: ${remotePath}`, error.message);
 
       // 判断错误类型并给出友好的错误信息
@@ -814,21 +794,11 @@ class OssStorageClient {
   async end() {
     this.s3Client = null;
   }
-
-  /**
-   * 格式化文件大小
-   */
-  formatSize(bytes) {
-    if (bytes === 0) return '0 B';
-    const k = 1024;
-    const sizes = ['B', 'KB', 'MB', 'GB', 'TB'];
-    const i = Math.floor(Math.log(bytes) / Math.log(k));
-    return Math.round(bytes / Math.pow(k, i) * 100) / 100 + ' ' + sizes[i];
-  }
 }
 
 module.exports = {
   StorageInterface,
   LocalStorageClient,
-  OssStorageClient
+  OssStorageClient,
+  formatFileSize  // 导出共享的工具函数
 };