SnapOtter d12b1c0fc6 fix: harden all AI tools against proxy timeouts and filename attacks ...

Convert all 9 AI tool routes (colorize, restore-photo, remove-background,
enhance-faces, blur-faces, red-eye-removal, erase-object, noise-removal,
upscale) to async 202 processing so none are vulnerable to proxy
connection timeouts.

Also fixes:
- Replace basename() with sanitizeFilename() in all AI tool routes
  (prevents double-extension attacks and adds length truncation)
- Add UUID format validation for clientJobId field
- Fix missing filename sanitization in noise-removal (was using raw
  user-supplied filename with zero sanitization)
- Remove em dash from error message in use-tool-processor

2026-05-01 00:11:03 +08:00

..

drizzle

fix: add statement-breakpoint separators to analytics migration

2026-04-22 19:15:38 +08:00

src

fix: harden all AI tools against proxy timeouts and filename attacks

2026-05-01 00:11:03 +08:00

drizzle.config.ts

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

package.json

chore: deploy to Cloudflare Pages and update branding

2026-04-24 18:06:29 +08:00

tsconfig.json

feat: add Fastify API server with health check and env config

2026-03-22 02:46:34 +08:00