Commit Graph

8 Commits

Author SHA1 Message Date
f3b0d79ef9 feat: update root layout with metadata
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-04 02:02:31 +08:00
cf7d3d5618 fix: use streaming and add path validation
- Replace fs.readFileSync() with fs.createReadStream() to prevent memory exhaustion
- Export validatePath() from fs-utils.ts
- Use validatePath() to validate full path including project and version parameters
- Fix incomplete path traversal protection
- Add filename encoding in Content-Disposition header

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-04 02:01:38 +08:00
7d5ee36f56 feat: add /api/download endpoint for APK file downloads
Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-04 02:00:36 +08:00
91c94bde88 fix: add URL encoding and remove unused import
- Add encodeURIComponent() for project, version, and filename parameters in downloadUrl to prevent XSS and URL breakage
- Remove unused formatDateTime import

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-04 01:59:53 +08:00
0d1ba31175 feat: add /api/apks endpoint 2026-03-04 01:58:52 +08:00
c032c7fd5d feat: add /api/versions endpoint 2026-03-04 01:57:46 +08:00
5be115d323 feat: add /api/projects endpoint 2026-03-04 01:56:47 +08:00
a78f029e03 Initial commit from Create Next App 2026-03-04 01:45:44 +08:00