Skip to content

v1.4.1

Choose a tag to compare

View all tags
@LucasArmstrong LucasArmstrong released this 03 Oct 16:00
· 3 commits to main since this release
v1.4.1
15332b0

What's Changed

馃敀 Security, Path Validation & Input Sanitization

  • Path Validation Allowlisting: Enforced directory allowlist boundaries and symlink resolution in visual spec ingestion and video processing pipelines.
  • Video Payload Safety Limits: Implemented strict payload and file size guardrails (MAX_VIDEO_SIZE_MB) to prevent resource exhaustion during keyframe extraction.
  • Automation Selector Escaping: Escaped automation targets and keyboard typing strings via JSON.stringify to mitigate script injection vulnerabilities.
  • Viewer Template Hardening: Hardened HTML visualization generation with entity encoding and default isolated output directories.
  • Release Metadata Sync: Synchronized manifests, documentation, and migration guidelines across 1.4.1 targets.

Pull Request: #20
Full Changelog: https://github.com/putervision/vision-memory-mcp/blob/main/CHANGELOG.md
Compare: v1.4.0...v1.4.1

Assets 2
Loading