3 people 914039ac81 Escape voice-derived attributes in Azure TTS SSML (#25776) ...

The Azure TTS handler (_tts_azure) interpolated the user-supplied voice,
and the locale derived from it, into the SSML xml:lang and <voice name>
attributes without XML-escaping, while the text body was already escaped
(2e75c6dbd). Escape both attributes too, so every user-derived value in
the SSML document is consistently encoded.

Co-authored-by: alanturing881 <alanturing881@users.noreply.github.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

2026-06-29 02:16:37 -05:00

..

data

…

internal

refac

2026-06-17 02:52:35 +02:00

migrations

refac

2026-06-29 00:21:37 -05:00

models

perf(channels): batch N+1 queries for reactions and thread replies (#25831)

2026-06-29 02:05:16 -05:00

retrieval

Close DNS-rebinding SSRF gap in get_content_from_url probe (#25775)

2026-06-29 02:15:31 -05:00

routers

Escape voice-derived attributes in Azure TTS SSML (#25776)

2026-06-29 02:16:37 -05:00

socket

Require auth on ydoc:awareness:update and ydoc:document:leave handlers (CWE-306) (#25946)

2026-06-17 00:06:13 +02:00

static

chore: format

2026-06-01 14:10:40 -07:00

storage

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00

tools

refac

2026-06-29 00:46:45 -05:00

utils

feat: add repeat/recurrence dropdown to calendar event modal (#25865)

2026-06-29 02:16:19 -05:00

__init__.py

refac

2026-06-17 03:01:11 +02:00

alembic.ini

fix: Alembic CLI commands from failing

2025-08-15 04:17:47 -04:00

config.py

refac

2026-06-29 01:52:07 -05:00

constants.py

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00

env.py

refac

2026-06-28 23:02:38 -05:00

events.py

refac

2026-06-25 15:56:10 +01:00

functions.py

fix: emit [DONE] for AsyncGenerator pipe returns (#24763)

2026-05-19 22:07:56 +04:00

main.py

refac

2026-06-29 00:40:28 -05:00

tasks.py

refac: modernize type annotations (PEP 604 / PEP 585)

2026-05-12 17:10:15 +09:00