Alessandro RosandGitHub 7418e51031 prevent directory traversal attacks (#5602) ...

Path names are used as part of paths in several components: in the
recorder, in the playback server and in every HTTP-based component
(WebRTC, HLS, API). Special characters that allow to escape from the
intended directory are now forbidden in order to prevent directory
traversal attacks.

2026-03-23 20:16:12 +01:00

..

mp4_boxes.go

recorder: write additional infos inside segments (#5083)

2025-10-13 12:34:44 +02:00

path_test.go

api: add /info endpoint (#945) (#5045)

2025-09-30 10:39:27 +02:00

path.go

record: support storing timezone in recording segments (#3566) (#4597)

2025-06-02 20:47:29 +02:00

recordstore.go

fix cleaning of recordings in case of multiple recordDeleteAfter values (#3557) (#3741)

2024-09-08 20:33:18 +02:00

segment_test.go

bump Golang to 1.26 (#5460)

2026-02-21 14:48:53 +01:00

segment.go

prevent directory traversal attacks (#5602)

2026-03-23 20:16:12 +01:00