enable jackson safety features like MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES);

Jackson can do all sorts of tricks that we don't need when parsing the JSON index. They should be disabled as much as possible to remove potential exploit vectors, for example MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES.

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information