CI Bot
9e10e31a29
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 23s
CI/CD Pipeline / Integration Tests (pull_request) Successful in 1m17s
CI/CD Pipeline / Frontend Lint (pull_request) Failing after 15m19s
CI/CD Pipeline / Unit Tests (pull_request) Failing after 15m19s
CI/CD Pipeline / Build & Push Staging (Watchtower auto-deploy) (pull_request) Has been skipped
CI/CD Pipeline / Build Production Runtime Images (pull_request) Has been skipped
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
P0-1 SSRF防护：统一URL安全校验方案 - 新增 url_security.py：SSRF防护工具（scheme白名单、端口白名单、内网IP拦截、内网主机名拦截、DNS解析校验） - generation.py URL校验函数增加SSRF前置校验 - PiP引擎URL类型增加安全校验 - 贴纸引擎URL类型增加安全校验 P0-2 路径遍历防护：输入路径校验强化 - 新增 path_security.py：路径安全工具（路径遍历防护、local:// schema校验、文件名清理、允许目录白名单） - resolve_asset_path 加固：本地绝对路径白名单、空字节检测、存储键路径遍历拦截 - PiP引擎local_path类型：增加允许目录校验 - 贴纸引擎：区分本地路径/URL，分别增加安全校验 P1 裸subprocess统一：3处FFmpeg调用走run_ffmpeg - unified_render_service.py _extract_audio：改用 run_ffmpeg - compose_video.py：改用 run_ffmpeg - edit_plan_generation.py：改用 run_ffmpeg 新增测试： - test_url_security.py：29个SSRF防护单测 - test_path_security.py：27个路径遍历防护单测 - 原有171+105=276个单测零回归