ubuntuandClaude Opus 5.5 16e979fe77 Fix arbitrary file write in /upload and /analyse_m3u_file ...

/upload stored files under the client-supplied filename (allowing .php
webshells and ../ traversal) and analyse_m3u_file renamed files from
unvalidated filename/id_playlist. Uploads are now always stored as
upload_<uuid>.m3u, id_playlist must be a UUID, and paths go through
safe_join.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-15 11:54:14 +00:00

download_logo

Commit initial du projet serverIPTV

2026-08-03 13:14:43 +00:00

epg

Commit initial du projet serverIPTV

2026-08-03 13:14:43 +00:00

static

Fix arbitrary file write in /upload and /analyse_m3u_file

2026-10-15 11:54:14 +00:00

.gitignore

Commit initial du projet serverIPTV

2026-08-03 13:14:43 +00:00

docker-compose.yml

Delegate TLS termination to the nginx reverse proxy

2026-08-30 11:47:25 +00:00

Dockerfile

Commit initial du projet serverIPTV

2026-08-03 13:14:43 +00:00

server.py

Fix arbitrary file write in /upload and /analyse_m3u_file

2026-10-15 11:54:14 +00:00

S

Description

No description provided

1.7 MiB

Languages

HTML 51.1%

Python 38.7%

JavaScript 9.3%

Shell 0.7%

Dockerfile 0.2%