Fix security issues found during code review - #75

Open

Gahrcoder wants to merge 6 commits into

NVIDIA:mainfrom

Gahrcoder:fix/security-hardening

Commits on Apr 7, 2026

fix: sanitize voice prompt filename to prevent path traversal
Gahrcoder
committed
3b08c44
fix: use weights_only=True in torch.load to prevent arbitrary code execution
Gahrcoder
committed
8243929
fix: validate tar members before extraction to prevent zip-slip
Gahrcoder
committed
342d7e6
fix: disable follow_symlinks in static file serving
Gahrcoder
committed
5eec67e
fix: use request.query for seed parameter access
Gahrcoder
committed
003f111
fix: remove duplicate random import
Gahrcoder
committed
53a0b79