tapir

Files

T

mathiasandClaude Sonnet 5.5 4a0c51d877 test(audio): attacker-supplied input must not steer ffmpeg to other files or URLs (red)

A file's CONTENT can tell ffmpeg to open other paths or URLs (HLS, concat
playlists). ffmpeg 7.0.2 refuses the ones tried, but that is version luck and
the image's ffmpeg is still to be chosen (#34). Pin protocol_whitelist to
file,pipe and format_whitelist to the demuxers real audio uses, before the input.

Red: audio.AllowedDemuxers is undefined.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-01 17:13:54 +02:00

adapters

test(audio): attacker-supplied input must not steer ffmpeg to other files or URLs (red)

2026-10-01 17:13:54 +02:00

auth

chore: rename Go module path gitea.d-ma.be → git.d-ma.be

2026-07-02 14:37:33 +02:00

config

feat(config): measured chat budget (90,000) and upload chat model (gemma4-26b)

2026-10-01 17:07:20 +02:00

domain

feat(domain): types for private uploaded transcripts (ADR-033)