mathiasandClaude Sonnet 5.5 12576aa129 feat(audio): MaxSeconds caps the converted length, so a header that lies cannot become hours of WAV (review F2) ...

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

2026-10-02 16:45:25 +02:00

..

ffmpeg_test.go

test: the duration limit is checked against what is converted, not what the header claims (red; adversarial review F2)

2026-10-02 16:43:46 +02:00

ffmpeg.go

feat(audio): MaxSeconds caps the converted length, so a header that lies cannot become hours of WAV (review F2)

2026-10-02 16:45:25 +02:00

ffprobe_test.go

test(audio): attacker-supplied input must not steer ffmpeg to other files or URLs (red)

2026-10-01 17:13:54 +02:00

ffprobe.go

feat(audio): restrict ffmpeg/ffprobe input to local files and audio demuxers

2026-10-01 17:14:29 +02:00

hostile_live_test.go

test(audio): opt-in live ffprobe check on hostile playlists and real audio

2026-10-01 17:14:29 +02:00