CI Bot
47bf6bfa5f
CI/CD Pipeline / Validate Code Quality And Tests (pull_request) Failing after 17s
CI/CD Pipeline / Unit Tests (pull_request) Failing after 1m23s
CI/CD Pipeline / Integration Tests (pull_request) Successful in 1m29s
CI/CD Pipeline / Frontend Lint (pull_request) Successful in 2m20s
CI/CD Pipeline / Build Staging Web Image (pull_request) Has been skipped
CI/CD Pipeline / Build Staging API Image (pull_request) Has been skipped
CI/CD Pipeline / Build Production API Image (pull_request) Has been skipped
CI/CD Pipeline / Build Production Worker Image (pull_request) Has been skipped
CI/CD Pipeline / Build Production Web Image (pull_request) Has been skipped
CI/CD Pipeline / Build Staging Worker Image (pull_request) Has been skipped
CI/CD Pipeline / Deploy Staging (Watchtower auto-deploy) (pull_request) Has been skipped
CI/CD Pipeline / Deploy Production (pull_request) Has been skipped
CI/CD Pipeline / Staging E2E Tests (pull_request) Has been skipped
CI/CD Pipeline / Staging API Integration Tests (pull_request) Has been skipped
CI/CD Pipeline / Production Browser E2E (pull_request) Has been skipped
P1-1: 路径校验startswith绕过 - multi_track_mixer: 改用resolved_path.relative_to()替代原始字符串startswith - concat_engine: 同上 - subtitle_render_engine: 同上 - 原因: /tmp/work/../../opt/secret.aac 原始字符串以work_dir开头， 旧代码误判为在目录内从而跳过白名单校验 P1-2: build_subtitle_filter work_dir默认值绕过 - work_dir=None时不再用ass_path父目录自证清白 - 不传/None/空字符串一律抛PathSecurityError - 调用方必须显式传入可信的work_dir 新增4个单测验证绕过漏洞已修复，24个测试全绿