Peter Steinberger 683aa09b55 refactor(media): harden localRoots bypass (#16739) ...

Merged via /review-pr -> /prepare-pr -> /merge-pr.

Prepared head SHA: 89dce69f50
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Co-authored-by: steipete <58493+steipete@users.noreply.github.com>
Reviewed-by: @steipete

2026-02-15 03:27:01 +01:00

..

auto-reply

test(web): stabilize processMessage inbound contract cleanup

2026-02-15 00:26:41 +00:00

inbound

perf(test): consolidate inbound access-control suites

2026-02-14 23:51:47 +00:00

accounts.test.ts

security(web): sanitize WhatsApp accountId to prevent path traversal (#4610)

2026-02-01 14:29:53 -08:00

accounts.ts

security(web): sanitize WhatsApp accountId to prevent path traversal (#4610)

2026-02-01 14:29:53 -08:00

accounts.whatsapp-auth.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

active-listener.ts

fix(whatsapp): preserve outbound document filenames (#15594)

2026-02-13 18:54:10 +01:00

auth-store.ts

security: enforce 0o600 permissions on WhatsApp credential files (#10529)

2026-02-13 16:02:15 +01:00

auto-reply.broadcast-groups.broadcasts-sequentially-configured-order.test.ts

refactor(test): dedupe web broadcast group inbound setup

2026-02-14 21:20:43 +00:00

auto-reply.broadcast-groups.skips-unknown-broadcast-agent-ids-agents-list.test.ts

refactor(test): dedupe web broadcast group inbound setup

2026-02-14 21:20:43 +00:00

auto-reply.impl.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

auto-reply.test-harness.ts

chore(test): fix oxlint errors

2026-02-14 23:16:36 +00:00

auto-reply.ts

refactor(src): split oversized modules

2026-01-14 01:17:56 +00:00

auto-reply.typing-controller-idle.test.ts

refactor(test): migrate web auto-reply tests to harness

2026-02-14 19:04:39 +00:00

auto-reply.web-auto-reply.compresses-common-formats-jpeg-cap.e2e.test.ts

perf(test): consolidate web auto-reply media e2e suites

2026-02-14 21:20:15 +00:00

auto-reply.web-auto-reply.last-route.test.ts

refactor(test): dedupe web auto-reply last-route test

2026-02-15 00:26:46 +00:00

auto-reply.web-auto-reply.monitor-logging.test.ts

perf(test): consolidate web auto-reply suites

2026-02-14 23:16:37 +00:00

auto-reply.web-auto-reply.reconnects-after-connection-close.e2e.test.ts

test(web): import auto-reply after mocks

2026-02-14 22:01:54 +01:00

inbound.media.test.ts

perf(test): dedupe telegram/node coverage and speed fixtures

2026-02-14 02:37:09 +00:00

inbound.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

inbound.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

login-qr.test.ts

chore: migrate to oxlint and oxfmt

2026-01-14 15:02:19 +00:00

login-qr.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

login.coverage.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

login.test.ts

Tests: harden flake hotspots and consolidate provider-auth suites (#11598)

2026-02-07 21:32:23 -05:00

login.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

logout.test.ts

perf(test): speed up web logout tests

2026-02-14 16:36:15 +00:00

media.test.ts

refactor(media): harden localRoots bypass (#16739)

2026-02-15 03:27:01 +01:00

media.ts

refactor(media): harden localRoots bypass (#16739)

2026-02-15 03:27:01 +01:00

monitor-inbox.allows-messages-from-senders-allowfrom-list.test.ts

refactor(test): dedupe web monitor inbox test setup

2026-02-14 19:35:00 +00:00

monitor-inbox.blocks-messages-from-unauthorized-senders-not-allowfrom.test.ts

refactor(test): dedupe web monitor inbox test setup

2026-02-14 19:35:00 +00:00

monitor-inbox.captures-media-path-image-messages.test.ts

refactor(test): dedupe web monitor inbox test setup

2026-02-14 19:35:00 +00:00

monitor-inbox.streams-inbound-messages.test.ts

refactor(test): dedupe web monitor inbox test setup

2026-02-14 19:35:00 +00:00

monitor-inbox.test-harness.ts

fix(media): strip MEDIA: prefix in loadWebMediaInternal (#13107)

2026-02-14 21:41:26 +01:00

outbound.test.ts

feat(telegram): add sendPoll support (#16193) (#16209)

2026-02-14 18:34:30 +01:00

outbound.ts

fix(whatsapp): preserve outbound document filenames (#15594)

2026-02-13 18:54:10 +01:00

qr-image.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

qr-image.ts

refactor: consolidate PNG encoder and safeParseJson utilities (#12457)

2026-02-09 00:21:54 -08:00

reconnect.test.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

reconnect.ts

refactor: consolidate duplicate utility functions (#12439)

2026-02-08 23:59:43 -08:00

session.test.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00

session.ts

security: enforce 0o600 permissions on WhatsApp credential files (#10529)

2026-02-13 16:02:15 +01:00

test-helpers.ts

refactor(test): migrate web auto-reply tests to harness

2026-02-14 19:04:39 +00:00

vcard.ts

chore: Enable "curly" rule to avoid single-statement if confusion/errors.

2026-01-31 16:19:20 +09:00