-
Notifications
You must be signed in to change notification settings - Fork 6
Pull requests: Eyevinn/open-live
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
fix: add .max(256) to all resource name fields to prevent storage exhaustion (closes #84)
#96
opened Jul 10, 2026 by
LucasMaupin
Collaborator
Loading…
fix: rate-limit /reconnect to 5/min and remove cleanLegacyFixtures from reconnect handler (closes #89)
#95
opened Jul 10, 2026 by
LucasMaupin
Collaborator
Loading…
fix: add 5-minute TTL and Cache-Control: no-store to ICE server cache (closes #90)
#94
opened Jul 9, 2026 by
LucasMaupin
Collaborator
Loading…
fix: guard GO_LIVE and CUT_STREAM against unactivated productions (closes #87)
#93
opened Jul 9, 2026 by
LucasMaupin
Collaborator
Loading…
fix: implement per-route rate limits for activate and WHIP/WHEP endpoints (closes #83)
#92
opened Jul 7, 2026 by
LucasMaupin
Collaborator
Loading…
fix: require API key authentication for Swagger UI and OpenAPI spec endpoints (closes #81)
#91
opened Jul 7, 2026 by
LucasMaupin
Collaborator
Loading…
fix: wire log-redact dead code — add Pino redact + use safeFlowProjection (closes #69)
#76
opened Jun 25, 2026 by
LucasMaupin
Collaborator
Loading…
fix: add private IP blocklist to httpUrlOnly() to prevent SSRF (closes #65)
#75
opened Jun 24, 2026 by
LucasMaupin
Collaborator
Loading…
fix: replace SET_EFFECT Zod passthrough with strict discriminated union (closes #66)
#74
opened Jun 24, 2026 by
LucasMaupin
Collaborator
Loading…
fix: enforce allowlist enum on transitionType in WebSocket messages (closes #67)
#73
opened Jun 24, 2026 by
LucasMaupin
Collaborator
Loading…
fix: enforce hex color format on PipZone border.color (closes #68)
#72
opened Jun 23, 2026 by
LucasMaupin
Collaborator
Loading…
fix: remove data:text/html from graphicUrl() allowed MIME types (closes #70)
#71
opened Jun 23, 2026 by
LucasMaupin
Collaborator
Loading…
ProTip!
Follow long discussions with comments:>50.