mirror of
https://github.com/webadderallorg/Recordly.git
synced 2026-09-25 07:16:02 +00:00
webadderall
7f587a39a8
- Use videoSourcePath instead of fromFileUrl(videoPath) for cursor telemetry — fixes broken path when videoPath is an HTTP media-server URL - Validate filePath against approvedLocalReadPaths in get-local-media-url IPC handler before returning a URL - Use fs.realpath() instead of path.resolve() to close symlink bypass - Fix range parser to handle suffix ranges (bytes=-500) and guard against NaN values - Add CORS headers (Access-Control-Allow-Origin) to media server responses to prevent canvas tainting when using video frames - Handle OPTIONS preflight requests - Clear stale resolvedWebcamVideoUrl before resolving new URL to prevent flash of stale content