Supports specifying a file name during video recording, facilitating third-party access to the API for retrieving the recorded file name.#379
Open
eanfs wants to merge 1 commit intolanghuihui:v5from
Conversation
eanfs
added a commit
to eanfs/monibuca
that referenced
this pull request
Jan 12, 2026
1. 安全修复： - 在 MP4/FLV/HLS 插件中添加文件名安全验证 - 使用 filepath.Base() 清理路径分隔符，防止路径遍历攻击 - 验证文件名不为空且不是特殊路径（. 或 ..） 2. 逻辑修复： - 修复 MP4 API 中的录制任务查找逻辑 - 正确处理空文件名场景，避免重复录制任务 3. 代码质量： - 格式化 HLS 插件代码（修复空格/制表符混用问题） - 统一数据库模型字段命名（Filename -> FileName） 4. 配置解析修复： - 修复配置解析时的类型转换问题 - 使用 unmarshal 函数正确处理类型转换
eanfs
added a commit
to eanfs/monibuca
that referenced
this pull request
Jan 12, 2026
…e' into eanfs-v5 * pullrequests/eanfs/feature/support-record-with-file-name: fix: 修复 PR langhuihui#379 中的安全问题和逻辑缺陷 cluster pro test
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Supports specifying a file name during video recording, facilitating third-party access to the API for retrieving the recorded file name.