9 Commits (77ed4e38da92a21d5ee17d53bb82a7728442fd69)

Author	SHA1	Message	Date
Hong Phuc	77ed4e38da	fix: security hardening — remove eval/os.system/shell=True, fix 11 bugs ... Replace eval() with safe type-coercion dicts in console/settings/gui_utils. Replace os.system() with subprocess.run() in TTS engine_wrapper. Remove shell=True from all subprocess/Popen calls in main + ffmpeg_install. Redact credentials from error logs and settings page HTML. Fix 6 bare except clauses across the codebase. Bug fixes: - Config overwrite crash: set config={} after writing empty file - Playwright TimeoutError: import correct exception class - Lambda closure: default arg captures loop variable value - Redundant ffmpeg: single concat run after all segments generated - Audio IndexError: explicit check before accessing clips_durations[0] - NSFW selector: use generic role-based button instead of hardcoded post ID - Dead macOS branch: sys.platform == "darwin" instead of os.name == "mac" Hardening: - Flask secret_key from env var, rotate per startup - Docker non-root user (appuser) - CSRF check via Origin header on mutating requests - Security headers: X-Content-Type-Options, X-Frame-Options - Citation path traversal sanitization - Temp file cleanup in ProgressFfmpeg.__exit__ Co-Authored-By: RuFlo <ruv@ruv.net>	4 weeks ago
Hong Phuc	faaaa85be8	feat: video creation dashboard with real-time progress tracking ... Add /create page with pipeline stage polling, /video/<id> route for safe file serving, modernized Tailwind/DaisyUI UI, and pytest regression tests. Consolidate AGENT.md + AGENTS.md into CLAUDE.md. Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>	4 weeks ago
Hong Phuc	4d8c393a94	Make the app runnable in Docker for GUI and CLI ... Build one shared container image for the Flask GUI and CLI pipeline, with Playwright, FFmpeg, and spaCy preinstalled so first runs are reliable. Add bootstrap logic for missing runtime files, bind the GUI to 0.0.0.0 in containers, and preserve state through a repo mount. Constraint: Local development needs a single image that supports both entrypoints without introducing extra services or dependencies. Rejected: Separate GUI and CLI images | duplicated maintenance and no runtime benefit for this repo. Confidence: high Scope-risk: moderate Directive: Keep runtime state creation in the container bootstrap layer; do not reintroduce host-specific assumptions into GUI startup. Tested: docker compose build; docker compose run --rm gui python -c '...'; docker compose run --rm cli python -c 'import main'; docker compose up -d gui; curl -I http://localhost:4000 Not-tested: Full end-to-end video generation with live credentials in this environment.	1 month ago
Jason	6ade93390c	Fix actions + update dockerfile python v	2 years ago
Jason	5d2b6e0b29	CHORE: removed some unused comments ... + Shameless plugging.	2 years ago
Shayan Jizan	8a24a9e773	Update Dockerfile ... Install the ffmpeg dependency.	3 years ago
ali	ba7e4dc123	Updates docker to use python:3.10.9-slim as base image	4 years ago
andronedev	49de46dd53	Update Dockerfile	4 years ago
andronedev	593094d14b	add Docker support	4 years ago