Media ec826bb8f3 fix: restrict web ingest to official YouTube hosts and bound submission size ...

The submit form's URL validation accepted any http/https host. Restrict it
to an explicit allowlist of official YouTube hosts using normalized,
exact hostname comparison (no substring/suffix matching), reject embedded
userinfo and malformed URLs, and add server-side length bounds for the URL,
submitter, note, and total request body.

2026-08-07 17:04:05 -05:00

..

__init__.py

test: characterize contracts and make startup explicit

2026-08-06 17:24:20 -05:00

test_app.py

fix: restrict web ingest to official YouTube hosts and bound submission size

2026-08-07 17:04:05 -05:00

test_config_contracts.py

fix: pass mqtt credentials through compose

2026-08-06 19:30:22 -05:00

test_downloads.py

feat: overhaul video player controller

2026-08-06 20:08:12 -05:00

test_mqtt_adapter.py

build: harden controller v2 runtime

2026-08-06 19:23:02 -05:00

test_playback.py

feat: overhaul video player controller

2026-08-06 20:08:12 -05:00

test_router.py

feat: coordinate authoritative playback and audio routing

2026-08-06 18:52:01 -05:00

test_runtime_assets.py

fix: pass mqtt credentials through compose

2026-08-06 19:30:22 -05:00

test_service.py

fix: allow genuinely new playlist ingest without fresh Player evidence

2026-08-07 17:01:39 -05:00

test_store.py

fix: allow genuinely new playlist ingest without fresh Player evidence

2026-08-07 17:01:39 -05:00