All pull requests

Pull requests

• Sanitize author and filename path components

  #484·failsafesecurity opened Sep 17, 2026·

  ·
  4

• Constrain and validate userscript WebSocket tasks

  #483·failsafesecurity opened Sep 17, 2026·

  ·
  4

• Keep HTTP API local and reject caller-supplied proxy

  #482·failsafesecurity opened Sep 17, 2026·

  ·
  2

• Verify TLS certificates for XHS HTTP requests

  #481·failsafesecurity opened Sep 17, 2026·

  ·
  5

• fix: 优先下载 H.264 视频，避免 HEVC 只有声音

  #466·zimu1593 opened Aug 26, 2026·

  ·
  4