SnapOtter d12b1c0fc6 fix: harden all AI tools against proxy timeouts and filename attacks ...

Convert all 9 AI tool routes (colorize, restore-photo, remove-background,
enhance-faces, blur-faces, red-eye-removal, erase-object, noise-removal,
upscale) to async 202 processing so none are vulnerable to proxy
connection timeouts.

Also fixes:
- Replace basename() with sanitizeFilename() in all AI tool routes
  (prevents double-extension attacks and adds length truncation)
- Add UUID format validation for clientJobId field
- Fix missing filename sanitization in noise-removal (was using raw
  user-supplied filename with zero sanitization)
- Remove em dash from error message in use-tool-processor

2026-05-01 00:11:03 +08:00

..

api

fix: harden all AI tools against proxy timeouts and filename attacks

2026-05-01 00:11:03 +08:00

docs

docs: add targetSize parameter to image-to-pdf API docs

2026-04-27 22:39:57 +08:00

landing

fix: use Docker Hub as primary one-liner (GHCR is private)

2026-04-25 01:28:02 +08:00

web

fix: harden all AI tools against proxy timeouts and filename attacks

2026-05-01 00:11:03 +08:00