v7.1.4

Security

• Harden media file serving against path injection (CodeQL alerts #12, #13, #14)
  • Early rejection of .. traversal and absolute paths before filesystem operations
  • Use resolve(strict=True) to prevent TOCTOU race conditions with symlinks
  • Existing is_relative_to check retained as defense-in-depth

What's Changed

• fix: resolve CI test failures and lint formatting by @GeiserX in #85
• fix: harden media path validation against path injection by @GeiserX in #86

Full Changelog: v7.1.3...v7.1.4

What's Changed

• fix: resolve CI test failures and lint formatting by @GeiserX in #85
• fix: harden media path validation against path injection by @GeiserX in #86

Full Changelog: v7.1.3...v7.1.4