SnapOtterandGitHub 43334324c4 fix(api): contain library stored-name path traversal (#600) ...

The library file-storage helpers joined FILES_STORAGE_PATH with a database stored_name and never checked containment, so a crafted name could read or delete files outside the storage root after a malicious 1.x SQLite import (which copies stored_name verbatim). Add assertSafeStoredName() and apply it in every helper that resolves a stored name to a path, matching the containment guard object-storage already uses.

Reported by Alpesh Bhagwatkar.

2026-07-21 07:30:46 +00:00

..

beautify

…

analytics-allowlist.ts

feat(telemetry): Sentry + PostHog quality pass (#546)

2026-07-17 01:51:48 +00:00

analytics-gate.ts

feat(analytics): instance census, full capture, richer error context (#511)

2026-07-13 14:23:16 +08:00

analytics.ts

feat(analytics): instance census, full capture, richer error context (#511)

2026-07-13 14:23:16 +08:00

animation-detect.ts

feat(tools): remove background from animated GIFs (WebP, APNG) (#502)

2026-07-11 19:53:00 +08:00

apng.ts

feat(tools): remove background from animated GIFs (WebP, APNG) (#502)

2026-07-11 19:53:00 +08:00

audit-integrity.ts

style: apply Biome formatting to enterprise files

2026-06-14 14:53:44 +08:00

audit.ts

chore: post-2.0 QA hygiene across api hardening and qa metadata

2026-06-20 10:50:20 +08:00

auto-orient.ts

…

bg-effects.ts

fix(api): support sharp 0.35 types

2026-06-29 16:09:30 +08:00

browser-service.ts

fix(security): harden auth and outbound fetches

2026-06-29 17:54:12 +08:00

cleanup.ts

…

csp.ts

fix: remove automatic third-party egress of user data + optional strict offline mode (OSM tiles, Scalar fonts, editor fonts, AI model downloads) (#422)

2026-07-04 05:46:52 +00:00

deploy-mode.ts

feat(analytics): instance census, full capture, richer error context (#511)

2026-07-13 14:23:16 +08:00

encryption.ts

style: apply Biome formatting to enterprise files

2026-06-14 14:53:44 +08:00

env.ts

fix(api): wait for Postgres and Redis at startup instead of crash-looping (#537)

2026-07-16 22:50:11 +08:00

error-report.ts

feat(telemetry): Sentry + PostHog quality pass (#546)

2026-07-17 01:51:48 +00:00

errors.ts

fix: QA sweep - tool routes, security, i18n, a11y, + AI bundle install hardening (#393)

2026-07-03 09:54:02 +08:00

exiftool.ts

…

external-auth-resolver.ts

fix(security): harden auth and outbound fetches

2026-06-29 17:54:12 +08:00

feature-install-queue.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

feature-status.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

file-storage.ts

fix(api): contain library stored-name path traversal (#600)

2026-07-21 07:30:46 +00:00

file-validation.ts

fix: resolve 18 QA-discovered bugs across tools, previews, and the AI pipeline (#242)

2026-06-15 22:26:24 +08:00

filename.ts

fix: handle non-image modalities across uploads, previews, and filenames (#255)

2026-06-16 18:04:48 +08:00

format-decoders.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

format-encoders.ts

feat(tools): 2.0 phase 5 wave 5a - image gap-fill (11 tools) (#225)

2026-06-13 10:19:16 +08:00

heic-converter.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

image-error.ts

fix(image-tools): surface Sharp encode failures instead of "Error: Error" (#534)

2026-07-16 19:26:11 +08:00

install-watchdog.ts

fix: reliable, self-healing AI feature-bundle installs (#472)

2026-07-10 07:32:48 +00:00

log-trace-mixin.ts

feat: add OpenTelemetry distributed tracing (enterprise) (#232)

2026-06-15 12:53:06 +08:00

logger.ts

feat: add OpenTelemetry distributed tracing (enterprise) (#232)

2026-06-15 12:53:06 +08:00

media-tool.ts

fix: QA sweep - tool routes, security, i18n, a11y, + AI bundle install hardening (#393)

2026-07-03 09:54:02 +08:00

meme-text-renderer.ts

…

metrics.ts

fix(enterprise): ship enterprise package in prod image + S3, analytics, tracing, queue fixes (#342)

2026-06-24 17:27:59 +08:00

multipart-parts.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

object-storage.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

ocr-capability.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

ocr-image-input.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

ocr-limits.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

ocr-pdf-ingress.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

ocr-runtime-install.ts

fix(ocr): unblock and harden accurate-OCR install (#552)

2026-07-20 13:17:17 +08:00

output-format.ts

fix: adopt sharp 0.35.2+ by centralizing the FormatEnum key type (#362)

2026-07-01 21:50:29 +08:00

page-spec.ts

…

pdf-producer.ts

fix: stamp SnapOtter as Producer on generated PDFs (#416)

2026-07-04 03:05:32 +00:00

pool.ts

fix: handle non-image modalities across uploads, previews, and filenames (#255)

2026-06-16 18:04:48 +08:00

route-scratch.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

sentry-scrub.ts

feat(telemetry): Sentry + PostHog quality pass (#546)

2026-07-17 01:51:48 +00:00

sentry-tracing.ts

feat(telemetry): Sentry + PostHog quality pass (#546)

2026-07-17 01:51:48 +00:00

settings-helpers.ts

fix: test server registration gaps, Redis subscriber cleanup, atomic settings upsert

2026-06-14 14:30:35 +08:00

ssrf.ts

fix: error-only Sentry telemetry, storm-proof capture, and crash fixes (#476)

2026-07-10 21:41:49 +08:00

storage-writable.ts

fix(docker): make storage writable under non-root/foreign UIDs (TrueNAS, OpenShift) (#299)

2026-06-22 16:58:59 +08:00

subtitle-format.ts

feat(tools): 2.0 phase 5 wave 5b - ai pool: ocr-pdf, transcription, background composites (5 tools) (#226)

2026-06-13 10:19:47 +08:00

support-bundle.ts

…

svg-sanitize.ts

fix(security): close remaining high-severity CodeQL alerts

2026-06-21 13:47:22 +08:00

system-info.ts

feat(analytics): instance census, full capture, richer error context (#511)

2026-07-13 14:23:16 +08:00

timeout.ts

fix(jobs): make timeout messages tool-agnostic and CPU-aware (#596)

2026-07-21 15:22:57 +08:00

upload-stream.ts

fix: make OCR portable and reliable across AMD64 and ARM64 (#519)

2026-07-15 03:34:24 +08:00

wait-for-service.ts

fix(api): wait for Postgres and Redis at startup instead of crash-looping (#537)

2026-07-16 22:50:11 +08:00

webhook-delivery.ts

fix(security): harden auth and outbound fetches

2026-06-29 17:54:12 +08:00