FIX: 11 bugs bảo mật/ổn định (static mount chặn dotfile, delete traversal, cleanup giữ clips serverFileId, upload whitelist, password strength, auth audio endpoints, pedalboard==0.9.19, vendor CDN local) + FEATURE: Carla bridge preview/export MIDI notes âm VSTi (POST /midi-render, /carla-play-notes, nút Preview VSTi/Export MIDI->Audio; pedalboard 0.9.19 raw MIDI bytes; SONICFORGE_STORAGE_DIR cô lập test storage)

2026-08-10 18:46:54 +07:00
parent 67ad2b8e4b
commit 61cb4b846f
33 changed files with 1097 additions and 103 deletions
@@ -12,3 +12,9 @@ os.environ.setdefault(
    "SONICFORGE_DB_PATH",
    os.path.join(tempfile.gettempdir(), "sonicforge_test.db"),
 )
+# Cô lập storage khỏi app production (đang chạy root, ghi sf_scan_state.json
+# vào storage thật → pytest gặp PermissionError khi file root-owned).
+os.environ.setdefault(
+    "SONICFORGE_STORAGE_DIR",
+    os.path.join(tempfile.gettempdir(), "sonicforge_test_storage"),
+)