Alessandro RosandGitHub 7418e51031 prevent directory traversal attacks (#5602) ...

Path names are used as part of paths in several components: in the
recorder, in the playback server and in every HTTP-based component
(WebRTC, HLS, API). Special characters that allow to escape from the
intended directory are now forbidden in order to prevent directory
traversal attacks.

2026-03-23 20:16:12 +01:00

..

api

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

auth

api: add user field to RTSP, RTMP, SRT, WebRTC conns and sessions (#5104) (#5565)

2026-03-14 00:03:58 +01:00

certloader

replace New* with Initialize() (#4345)

2025-03-16 15:34:53 +01:00

conf

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

confwatcher

update linter settings (#4790)

2025-07-26 16:44:32 +02:00

core

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00

counterdumper

api: add new stats (#5582)

2026-03-17 17:22:15 +01:00

defs

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00

errordumper

api: add new stats (#5582)

2026-03-17 17:22:15 +01:00

externalcmd

update linter settings (#4790)

2025-07-26 16:44:32 +02:00

formatlabel

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00

hooks

api: add missing enums and move all enums in dedicated components (#5576)

2026-03-15 22:09:00 +01:00

linters

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00

logger

emit structured logs with nanosecond precision (#4924) (#5404)

2026-02-05 16:31:23 +01:00

metrics

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00

ntpestimator

recorder: reset when absolute time drifts from stream time (#4778) (#5239)

2025-12-02 18:10:23 +01:00

packetdumper

add integrated packet dumper (#5488)

2026-02-22 13:34:05 +01:00

playback

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

pprof

api: add missing enums and move all enums in dedicated components (#5576)

2026-03-15 22:09:00 +01:00

protocols

webrtc: strip TWCC extension of incoming RTP packets (#5146) (#5605)

2026-03-23 14:14:46 +01:00

recordcleaner

update golangci-lint configuration (#5182)

2025-11-11 23:57:52 +01:00

recorder

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00

recordstore

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00

restrictnetwork

support filtering interface and source IP in UDP sources (#4178) (#4464)

2025-04-28 22:22:55 +02:00

rlimit

remove deprecated build flags syntax (#3930)

2024-11-06 15:07:33 +01:00

servers

rtsp: support unwrapping MPEG-TS tracks (#5476)

2026-03-17 19:14:04 +01:00

staticsources

api: add missing enums and move all enums in dedicated components (#5576)

2026-03-15 22:09:00 +01:00

stream

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00

test

api: add user field to RTSP, RTMP, SRT, WebRTC conns and sessions (#5104) (#5565)

2026-03-14 00:03:58 +01:00

teste2e

webrtc: allow tuning WHEP timeouts (#5027) (#5479)

2026-02-18 16:29:25 +01:00

unit

solve codec labels internally (#5603)

2026-03-21 18:22:49 +01:00