Validate before storing

An upload pipeline should check that a file is an allowed image type and enforce sensible size limits before it is accepted.

Keep the stored asset associated with the correct site. The document should reference that asset by its stable identifier rather than depending on a temporary editor URL.

Deliver through a safe public route

The public page needs a URL that can reliably return the image bytes to both browsers and image optimizers.

Test the complete path from an existing asset record to the rendered page, including response status and content type.