Repository Issue Activity (beta)

#446 What is each port used for?

#452 Enforce request-body limits before AMF gateway and RTMPT allocation

#358 voice chat as3

#464 Remove or protect the root gc.jsp diagnostic endpoint

#473 Protect shutdown capability with owner-only permissions and no token logging

#453 Confine persistent shared-object names to the persistence root

#463 Confine playback and recording names to application stream roots

#474 Prevent path traversal during WAR extraction

#475 Add configurable protection against 1-byte RTMP chunk CPU amplification

#456 Enforce configured RTMP maximum packet size before allocation

#481 Remove cryptographic secrets and credentials from debug logs

#458 Harden XML parsers against DTD and entity expansion

#472 Harden optional SCTP-over-UDP parsing and receive-loop state

#480 Bound Matroska element allocation and guarantee skip progress

#476 Validate MP4 sample sizes against file bounds before allocation

#455 Bound ScreenVideo dimensions and retained codec allocations

#471 Validate OBU payload bounds before copying

#479 Bound per-connection RTMP packet queues and apply backpressure

#478 Bind WebSocket managers to unambiguous host and application identity

#477 Require admitted shared-object membership for mutations and sends

#470 Enable exact WebSocket Origin validation for credentialed handshakes

#469 Add AMF decode depth and aggregate allocation budgets

#468 Authenticate, authorize, and resource-bound the optional SSE endpoint

#467 Replace AMF class-name instantiation with an explicit type allowlist

#466 Require application authorization before WebSocket scope creation and registration