bambuddy/backend/app
maziggy 3da4eee16e Bound the scheme repetition in the log credential-redaction pattern. As an
unbounded repetition the match was quadratic in the subject length: on a run
of scheme-legal characters the engine restarted at every offset and consumed
to the end before failing to find "://". ffmpeg echoes the configured camera
URL into its stderr and the whole blob reaches the pattern before any
truncation, so the subject length is attacker-influenced.
2026-08-02 11:17:24 +02:00
..
api feat(support): record process memory, threads and children in bundles (#2734) 2026-08-02 09:51:01 +02:00
core Bound the scheme repetition in the log credential-redaction pattern. As an 2026-08-02 11:17:24 +02:00
data
i18n
models Merge branch 'dev' into feature/oidc-env-config 2026-07-31 17:05:24 +02:00
schemas fix(slicer): bound slices by silence, not by total slicing time (#2730) 2026-08-02 09:50:38 +02:00
services fix(slicer): bound slices by silence, not by total slicing time (#2730) 2026-08-02 09:50:38 +02:00
utils fix(slice): give the slice modal one filament row per project slot (#2712) 2026-08-02 09:42:07 +02:00
__init__.py
cli.py
main.py y fix(camera): rotate every still exactly once, and cover the sources that let ffmpeg write the file 2026-08-02 09:47:29 +02:00