feat: hardening — bounded reads, ffmpeg protocols, embedded api reference, disabled accounts (RFC-023) by InstaZDLL · Pull Request #332 · InstaZDLL/waveflow-server

fix(outbound): read every answer from another host under a ceiling

InstaZDLL

committed

366385b

fix(media): let ffmpeg and ffprobe open local files and nothing else

InstaZDLL

committed

39630cf

fix(shares): close what a disabled account handed out

InstaZDLL

committed

6d20cbb

feat(reference): serve the api reference from the binary

InstaZDLL

committed

1357859

fix(api): bound lyrics expansion, playlist imports, socket messages and searches

InstaZDLL

committed

a2cbf9f

fix(reference): decompress the bundle once and share both bodies

InstaZDLL

committed

e10a070

docs(rfcs): add RFC-023, hardening of reads, ffmpeg, the reference and disabled accounts

InstaZDLL

committed

80a3003

docs(rfcs): name the pull request that implements RFC-023

InstaZDLL

committed

79dec16

fix(reference): let an explicit gzip entry outrank the wildcard

InstaZDLL

committed

c429118

test(auth): check whose session a reenabled account's grant redeems into

InstaZDLL

committed

38eabc9

fix(reference): read accept-encoding weights as rfc 9110 writes them

InstaZDLL

committed

6cb5493

Merge branch 'main' of https://github.com/InstaZDLL/waveflow-server into feat/hardening

InstaZDLL

committed

5abad2f

refactor(podcast): read feeds through the shared bounded reader

InstaZDLL

committed

ae0efc6

docs(subsonic): say which search3 query browses everything

InstaZDLL

committed

c5cde13

Navigation Menu

Repository navigation

feat: hardening — bounded reads, ffmpeg protocols, embedded api reference, disabled accounts (RFC-023) - #332

feat: hardening — bounded reads, ffmpeg protocols, embedded api reference, disabled accounts (RFC-023)#332
InstaZDLL merged 14 commits into
mainfrom
feat/hardening

Commits on Oct 25, 2026

fix(outbound): read every answer from another host under a ceiling

fix(media): let ffmpeg and ffprobe open local files and nothing else

fix(shares): close what a disabled account handed out

feat(reference): serve the api reference from the binary

fix(api): bound lyrics expansion, playlist imports, socket messages and searches

fix(reference): decompress the bundle once and share both bodies

docs(rfcs): add RFC-023, hardening of reads, ffmpeg, the reference and disabled accounts

docs(rfcs): name the pull request that implements RFC-023

fix(reference): let an explicit gzip entry outrank the wildcard

test(auth): check whose session a reenabled account's grant redeems into

fix(reference): read accept-encoding weights as rfc 9110 writes them

Merge branch 'main' of https://github.com/InstaZDLL/waveflow-server into feat/hardening

refactor(podcast): read feeds through the shared bounded reader

docs(subsonic): say which search3 query browses everything