SnapOtter b00ef20667 fix: close SVG sanitization gap on upload routes and fix OCR/extension bugs ...

Security:
- Apply sanitizeSvg() to all file upload routes (files.ts, user-files.ts)
  preventing SSRF and script injection via SVG uploads to file library

Functional:
- Handle PaddleOCR-VL 1.5 markdown_texts output format in ocr.py
- Add empty-text fallback in OCR tier chain (ocr.ts) so higher tiers
  that return empty text fall back to the next tier automatically
- Fix SVG->PNG filename extension mismatch in tool-factory.ts so
  download endpoint serves correct Content-Type
- Report original upload size (not decoded size) in API response

Test infrastructure:
- Move Playwright auth state from test-results/ to .playwright/ to
  prevent mid-run cleanup deleting auth files
- Fix auth.setup.ts navigation race with waitForURL
- Fix gui-batch.spec.ts regex matching "Presets" instead of "reset"
- Fix pipeline-advanced.spec.ts crop bounds and resize assertions
- Broaden pipeline cleanup to include all E2E-prefixed pipelines

2026-04-30 16:11:33 +08:00

..

python

fix: close SVG sanitization gap on upload routes and fix OCR/extension bugs

2026-04-30 16:11:33 +08:00

src

test: add comprehensive AI feature install/uninstall test coverage

2026-04-28 13:27:54 +08:00

package.json

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

tsconfig.json

feat: add image-engine and ai stub packages

2026-03-22 02:44:46 +08:00