maziggy 4d94286e53 Fix CodeQL path injection vulnerabilities ...

- projects.py: Add path traversal validation to attachment endpoints
  - Reject filenames containing /, \, or ..
  - Prevents directory traversal attacks via URL parameters

- archives.py: Strengthen timelapse processing input validation
  - Validate audio suffix against whitelist (not just filename check)
  - Reject output filenames with .., empty, or dot-prefixed names
  - Fall back to safe default filename if validation fails

2026-02-05 18:09:42 +01:00

..

routes

Fix CodeQL path injection vulnerabilities

2026-02-05 18:09:42 +01:00

__init__.py

Added screenshots

2025-11-28 10:23:59 +01:00