hyperframes

ext/hyperframes

Fork 0

mirror of https://github.com/heygen-com/hyperframes.git synced 2026-10-30 17:27:09 +00:00

Files

T

History

James RussoandClaude Opus 5.5 17dd4ee347 fix(cli): keep beats audio paths inside the project (#6188 )

* fix(cli): keep beats audio paths inside the project

An encoded ../ in the music src decoded to a path outside the project, so
hyperframes beats read that file and wrote beats/<rel>.json outside the
project too. Fail the command when either path escapes.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(cli): drop added comment in beats containment check

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

* fix(cli): resolve symlinks in beats path containment

The lexical check let a symlinked folder inside the project send the read
or the beat-file write outside it, and refused an in-project file named
..music.wav. Use the realpath-aware resolveWithinProject and isSafePath
from core for both paths.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-24 08:23:32 +00:00

aws-lambda

chore: release v0.8.191 (#6170 )

2026-10-24 01:40:50 +00:00

cli

fix(cli): keep beats audio paths inside the project (#6188 )

2026-10-24 08:23:32 +00:00

core

fix(core): preserve images with commas in srcset URLs (#6192 )

2026-10-24 08:16:02 +00:00

engine

test(engine): synthesize the untagged AV1 fixture with whichever AV1 encoder ffmpeg has (#5379 )