Devin Robison 4797bbc5b9 fix: reject path traversal and home-dir patterns in media parse layer (#54642) ...

* fix: reject path traversal and home-dir patterns in media parse layer

* Update parse tests

2026-03-25 13:35:16 -06:00

..

audio-tags.ts

chore(tts): rename VOICE_BUBBLE identifiers to OPUS and update docs

2026-03-25 10:49:21 +05:30

audio.test.ts

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

audio.ts

refactor(media): centralize voice compatibility policy

2026-02-14 03:17:40 +01:00

base64.test.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

base64.ts

fix(security): harden session export image data-url handling

2026-02-24 02:53:39 +00:00

constants.ts

fix(media): harden unknown mime handling from #39199 (thanks @nicolasgrasset)

2026-03-07 23:30:32 +00:00

fetch.telegram-network.test.ts

test: speed up whatsapp and shared test suites

2026-03-24 15:16:18 +00:00

fetch.test.ts

test: speed up media fetch suite

2026-03-24 17:27:02 +00:00

fetch.ts

fix(media): bound remote error-body snippet reads

2026-03-22 22:43:42 -07:00

ffmpeg-exec.test.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

ffmpeg-exec.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

ffmpeg-limits.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

file-context.test.ts

Gateway: harden OpenResponses file-context escaping (#50782)

2026-03-19 22:02:13 -05:00

file-context.ts

Gateway: harden OpenResponses file-context escaping (#50782)

2026-03-19 22:02:13 -05:00

host.test.ts

style: align formatting with oxfmt 0.33

2026-02-18 01:34:35 +00:00

host.ts

chore: Enable "experimentalSortImports" in Oxfmt and reformat all imorts.

2026-02-01 10:03:47 +09:00

image-ops.helpers.test.ts

refactor(media): share image resize side grid and quality steps

2026-02-18 18:25:25 +00:00

image-ops.ts

refactor(media): share image resize side grid and quality steps

2026-02-18 18:25:25 +00:00

inbound-path-policy.test.ts

refactor: reuse shared core account lookups

2026-03-22 20:30:20 +00:00

inbound-path-policy.ts

refactor: reuse shared core account lookups

2026-03-22 20:30:20 +00:00

input-files.fetch-guard.test.ts

test: speed up media and image-generation suites

2026-03-24 23:45:33 +00:00

input-files.ts

Media: reject spoofed input_image MIME payloads (#38289)

2026-03-06 14:34:28 -05:00

load-options.test.ts

refactor: split telegram delivery and unify media/frontmatter/i18n pipelines

2026-03-02 04:14:06 +00:00

load-options.ts

feat: add --force-document to message.send for Telegram (bypass sendPhoto + image optimizer) (#45111)

2026-03-14 19:43:49 +08:00

local-media-access.ts

refactor(media): share local file access guards

2026-03-23 00:58:23 -07:00

local-roots.test.ts

test(media): make local roots fixture windows-safe

2026-03-25 06:24:39 -07:00

local-roots.ts

fix(media): align outbound media access with fs policy

2026-03-25 05:50:21 -07:00

mime.test.ts

fix(media): harden unknown mime handling from #39199 (thanks @nicolasgrasset)

2026-03-07 23:30:32 +00:00

mime.ts

Memory: add multimodal image and audio indexing (#43460)

2026-03-11 22:28:34 +00:00

outbound-attachment.ts

Core: move web media seam out of plugin sdk

2026-03-18 09:12:23 -07:00

parse.test.ts

fix: reject path traversal and home-dir patterns in media parse layer (#54642)

2026-03-25 13:35:16 -06:00

parse.ts

fix: reject path traversal and home-dir patterns in media parse layer (#54642)

2026-03-25 13:35:16 -06:00

pdf-extract.ts

feat: add PDF analysis tool with native provider support (#31319)

2026-03-01 22:39:12 -08:00

png-encode.ts

refactor: consolidate PNG encoder and safeParseJson utilities (#12457)

2026-02-09 00:21:54 -08:00

qr-image.ts

refactor: dedupe test and runtime seams

2026-03-24 23:33:30 +00:00

read-response-with-limit.test.ts

fix(media): bound remote error-body snippet reads

2026-03-22 22:43:42 -07:00

read-response-with-limit.ts

fix(media): bound remote error-body snippet reads

2026-03-22 22:43:42 -07:00

server.outside-workspace.test.ts

test: harden no-isolate timer and undici seams

2026-03-22 12:04:11 -07:00

server.test.ts

test: harden no-isolate timer and undici seams

2026-03-22 12:04:11 -07:00

server.ts

fix(media): retain inbound media with recursive cleanup TTL (#38292)

2026-03-06 22:06:09 -05:00

sniff-mime-from-base64.ts

refactor(media): share base64 mime sniff helper

2026-02-15 04:17:44 +00:00

store.outside-workspace.test.ts

fix: stabilize full gate

2026-03-17 07:06:25 +00:00

store.redirect.test.ts

fix: use 0o644 for inbound media files to allow sandbox read access (#17943)

2026-03-01 22:14:39 -08:00

store.test.ts

fix(media): retain inbound media with recursive cleanup TTL (#38292)

2026-03-06 22:06:09 -05:00

store.ts

refactor: deduplicate media store writes

2026-03-13 16:30:27 +00:00

temp-files.ts

refactor(media): add shared ffmpeg helpers

2026-03-03 01:14:14 +00:00

web-media.test.ts

fix(media): block remote-host file URLs in loaders

2026-03-23 00:29:46 -07:00

web-media.ts

refactor(media): share local file access guards

2026-03-23 00:58:23 -07:00