Skip to content

refactor: enhance path security and streamline file handling in timel…

d01316c
Select commit
Loading
Failed to load commit list.
Open

re-introduce project sync #135

refactor: enhance path security and streamline file handling in timel…
d01316c
Select commit
Loading
Failed to load commit list.
Codacy Production / Codacy Static Code Analysis required action Sep 3, 2025 in 0s

7 new issues (0 max.) of at least severity.

Annotations

Check failure on line 26 in app/utils/path-security.ts

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

app/utils/path-security.ts#L26

Detected possible user input going into a `path.join` or `path.resolve` function.

Check failure on line 27 in app/utils/path-security.ts

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

app/utils/path-security.ts#L27

Detected possible user input going into a `path.join` or `path.resolve` function.

Check failure on line 120 in app/utils/path-security.ts

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

app/utils/path-security.ts#L120

The application dynamically constructs file or path information.

Check failure on line 121 in app/utils/path-security.ts

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

app/utils/path-security.ts#L121

The application dynamically constructs file or path information.

Check failure on line 137 in app/utils/path-security.ts

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

app/utils/path-security.ts#L137

Detected possible user input going into a `path.join` or `path.resolve` function.

Check failure on line 138 in app/utils/path-security.ts

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

app/utils/path-security.ts#L138

Detected possible user input going into a `path.join` or `path.resolve` function.

Check failure on line 86 in app/videorender/videorender.ts

See this annotation in the file changed.

@codacy-production codacy-production / Codacy Static Code Analysis

app/videorender/videorender.ts#L86

The application processes user-input, this is passed to res.sendFile which can allow an attacker to arbitrarily read files on the system through path traversal.