bambuddy/backend
maziggy 3da4eee16e Bound the scheme repetition in the log credential-redaction pattern. As an
unbounded repetition the match was quadratic in the subject length: on a run
of scheme-legal characters the engine restarted at every offset and consumed
to the end before failing to find "://". ffmpeg echoes the configured camera
URL into its stderr and the whole blob reaches the pattern before any
truncation, so the subject length is attacker-influenced.
2026-08-02 11:17:24 +02:00
..
app Bound the scheme repetition in the log credential-redaction pattern. As an 2026-08-02 11:17:24 +02:00
tests Bound the scheme repetition in the log credential-redaction pattern. As an 2026-08-02 11:17:24 +02:00
__init__.py Added screenshots 2025-11-28 10:23:59 +01:00