2 Commits

Author	SHA1	Message	Date
Mark Backman	89f10dd9a1	test: drop webrtc-dependent test, remove webrtc extra from CI	2026-05-04 16:42:05 -04:00
Mark Backman	e780f759d0	fix: validate download path containment in runner ... Resolve and contain the user-supplied filename before serving it from the runner's /files endpoint. Also raise a 404 (instead of returning None) when the downloads folder is unset, and use the resolved basename for Content-Disposition.	2026-05-04 16:20:27 -04:00