Vito Sansevero d6cef849a1 fix: validate image file_info before it reaches the generated_images columns ...

link_image_to_prompt stored size, dimensions and format straight from the
request body, so a string such as '"><img src=x>' ended up in INTEGER
columns and was echoed back to the gallery. Size and dimensions are now
coerced with int() and bounded (size 0..10^12, width/height 0..65535),
format is matched against a whitelist of media formats, and anything
else is stored as NULL while the image still links. Non-dict metadata or
file_info no longer aborts the link.

2026-10-08 18:01:34 -07:00

..

__init__.py

style: apply Black formatter (line-length=88) to all Python files

2026-02-07 08:30:09 -08:00

models.py

fix: restore through SQLite's backup API, close_all for shared files, safer output scans

2026-10-08 18:01:34 -07:00

operations.py

fix: validate image file_info before it reaches the generated_images columns

2026-10-08 18:01:34 -07:00