openreader/src/lib
Richard R 2d205008ef fix(tts): restrict audio output URLs to replicate.delivery to prevent SSRF
Add explicit host validation to only allow audio output URLs from
replicate.delivery and its subdomains, blocking potential SSRF attacks
from malicious model outputs. Update tests to cover allowed and
disallowed host scenarios.
2026-06-10 13:57:57 -06:00
..
client feat(documents): add web import and creation dialog with SSRF-safe loader 2026-06-10 10:57:51 -06:00
server fix(tts): restrict audio output URLs to replicate.delivery to prevent SSRF 2026-06-10 13:57:57 -06:00
shared refactor(audio-text): centralize audio text normalization rules and update consumers 2026-06-10 09:00:13 -06:00