Ettore Di Giacinto 9ec1456ec6 fix(realtime): clean TTS temp path before read (gosec G304) ...

emitSpeech reads the WAV file the TTS backend wrote. The read moved here
from realtime.go, so code-scanning flagged it as a new G304 alert even
though the path is backend-controlled (a temp file), not user input.
Wrap it in filepath.Clean — a real path normalization that also clears
the alert, keeping with the repo's no-#nosec convention.

Assisted-by: Claude:claude-opus-4-8 gosec, golangci-lint
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-06-05 14:03:36 +00:00

..

auth

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087)

2026-05-30 12:04:10 +02:00

endpoints

fix(realtime): clean TTS temp path before read (gosec G304)

2026-06-05 14:03:36 +00:00

middleware

feat: forward reasoning_effort to the backend so jinja models honor it (#10184)

2026-06-05 13:45:43 +00:00

react-ui

test(react-ui): add page render-smoke specs, reset the coverage gate (#10122)

2026-06-01 14:24:36 +02:00

routes

feat(distributed): Add NATS JWT authentication and TLS/mTLS options (#10159)

2026-06-03 19:43:56 +02:00

static

fix(streaming): comply with OpenAI usage / stream_options spec (#9815)

2026-05-14 08:53:46 +02:00

views

feat(realtime): WebRTC support (#8790)

2026-03-13 21:37:15 +01:00

app_test.go

fix(application): stop backend processes synchronously on shutdown (#10058)

2026-05-29 11:40:43 +02:00

app.go

feat(distributed): Add NATS JWT authentication and TLS/mTLS options (#10159)

2026-06-03 19:43:56 +02:00

csrf_multipart_test.go

chore: Security hardening (#9719)

2026-05-08 16:25:45 +02:00

explorer.go

chore(refactor): move logging to common package based on slog (#7668)

2025-12-21 19:33:13 +01:00

http_suite_test.go

refactor(tests): split app_test.go, move real-backend coverage to e2e-backends

2026-04-27 23:09:20 +00:00

openresponses_test.go

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

render.go

feat: add distributed mode (#9124)

2026-03-30 00:47:27 +02:00

route_coverage_test.go

chore: Security hardening (#9719)

2026-05-08 16:25:45 +02:00