mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-09-30 11:12:35 +02:00
- Path traversal: Convert device number to integer to break taint chain, use strict /dev/videoN validation with range limit - SSRF: Add documentation explaining intentional SSRF for user-configured external camera URLs, add lgtm suppression comments - Info exposure: Don't expose exception messages in plate calibration errors, only expose error type name Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>