Skip to content

video/render: strict Zod schema before upstream forward - #1217

Merged
Flotapponnier merged 1 commit into
mainfrom
fix/video-render-zod-main
Jul 16, 2026
Merged

video/render: strict Zod schema before upstream forward#1217
Flotapponnier merged 1 commit into
mainfrom
fix/video-render-zod-main

Conversation

@Flotapponnier

Copy link
Copy Markdown
Collaborator

Hotfix cherry-pick to main. Same change as #1216 (dev).

Summary

  • Adds a strict Zod schema on /api/video/render body before forwarding to the Remotion renderer.
  • Caps array sizes (100 providers, 2000 timestamps/values) to prevent renderer OOM/CPU-bomb from a hostile POST.

Test plan

  • Frontend export-video modal still returns a video url on happy path
  • Malformed body returns 400 bad_body

@Flotapponnier
Flotapponnier merged commit aeaef30 into main Jul 16, 2026
1 check failed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant