whisper-api-server

Files

T

Serge ZaigraeffandClaude Opus 4.6 2138651474 Fix code review issues: security, race conditions, resource leaks

- Fix race condition: pass return_timestamps as parameter instead of mutating shared state
- Remove /local/transcriptions endpoint (path traversal vulnerability)
- Add timeout=30 and URL scheme validation to prevent SSRF
- Add temp file cleanup via try/finally in all route handlers
- AsyncTaskManager: add threading.Lock and TTL cleanup for completed tasks
- Change audio_rate to 16000 (matches Whisper's expected sample rate)
- Extract filename from URL via Content-Disposition/path
- Detect base64 audio format via python-magic
- Fix response_size_bytes to use json.dumps instead of str()
- Move scipy import to module level
- Clamp temperature to [0.0, 1.0]
- Deduplicate _load_model() code
- Fix docstrings, README structure, typo, log level

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-30 00:54:50 +03:00

audio

Fix code review issues: security, race conditions, resource leaks

2026-03-30 00:54:50 +03:00

core

Fix code review issues: security, race conditions, resource leaks

2026-03-30 00:54:50 +03:00

infrastructure

Fix code review issues: security, race conditions, resource leaks

2026-03-30 00:54:50 +03:00

static

Refactor project structure and add new features