fix issue

apps/edr-freight-api/src/modules/drivers/drivers.controller.ts

@@ -1,4 +1,5 @@
 import {
+  BadRequestException,
   Controller,
   Get,
   Post,
@@ -72,7 +73,30 @@ export class DriversController {
   @Post(':id/documents')
   @BookingStaff(FREIGHT_PERMS.drivers.update)
   @ApiConsumes('multipart/form-data')
-  @UseInterceptors(AnyFilesInterceptor())
+  // Bound the upload: 10MB/file, max 20 files, images + PDF only. Without limits
+  // AnyFilesInterceptor buffers arbitrarily large / arbitrary-type payloads.
+  @UseInterceptors(
+    AnyFilesInterceptor({
+      limits: { fileSize: 10 * 1024 * 1024, files: 20 },
+      fileFilter: (_req, file, cb) => {
+        const allowed = [
+          'image/jpeg',
+          'image/png',
+          'image/webp',
+          'image/gif',
+          'application/pdf',
+        ];
+        if (allowed.includes(file.mimetype)) {
+          cb(null, true);
+        } else {
+          cb(
+            new BadRequestException(`Unsupported file type: ${file.mimetype}`),
+            false,
+          );
+        }
+      },
+    }),
+  )
   @ApiOperation({ summary: 'Upload driver documents (code driver_docs)' })
   uploadDocuments(
     @Param('id', ParseUUIDPipe) id: string,