Alessandro RosandGitHub 7418e51031 prevent directory traversal attacks (#5602) ...

Path names are used as part of paths in several components: in the
recorder, in the playback server and in every HTTP-based component
(WebRTC, HLS, API). Special characters that allow to escape from the
intended directory are now forbidden in order to prevent directory
traversal attacks.

2026-03-23 20:16:12 +01:00

..

muxer_fmp4.go

update golangci-lint configuration (#5182)

2025-11-11 23:57:52 +01:00

muxer_mp4_test.go

build(deps): bump github.com/bluenviron/mediacommon/v2 (#5297)

2025-12-28 15:44:36 +01:00

muxer_mp4.go

playback: fix crash (#5240) (#5250)

2025-12-06 22:45:50 +01:00

muxer.go

switch to mediacommon/v2 (#4259)

2025-02-17 14:54:58 +01:00

on_get_test.go

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

on_get.go

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

on_list_test.go

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

on_list.go

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

segment_fmp4_test.go

build(deps): bump github.com/bluenviron/mediacommon/v2 (#5297)

2025-12-28 15:44:36 +01:00

segment_fmp4.go

add always available streams (#5335)

2026-01-31 14:44:58 +01:00

server_test.go

api: add user field to RTSP, RTMP, SRT, WebRTC conns and sessions (#5104) (#5565)

2026-03-14 00:03:58 +01:00

server.go

api: add missing enums and move all enums in dedicated components (#5576)

2026-03-15 22:09:00 +01:00