Sanitize song bytes

[AntonioMrtz]

Description

Sanitize song bytes uploaded by the user in create_song service method located at serverless and blob folders (supported architectures)

Context

Uploaded songs by the user can be dangerous due to cross-site scripting and other security risks

How to do it

• Implement sanitize_audio method in audio_utils
• Call sanitize_audio from blob and serverless song service create_song

Testing

• Add unit tests for sanitize_audio method
• Add integration tests for create_song endpoint request

[AntonioMrtz]

Sanitize incoming song bytes

[kanishk128]

Hey @AntonioMrtz would love to work on this, please assign

[AntonioMrtz]

Hi @kanishk128 , all yours. Let me know if you need anything :)

There's also the project docs if you need extra help on common tasks such as set up and configuration. Consider starring the project if you like it :)

[kanishk128]

Thanks @AntonioMrtz ! I just wanted to confirm a few things:

• sanitize_audio should be implemented in:
  SpotifyElectron/Backend/app/spotify_electron/utils/audio_management/audio_management_utils.py

• It will be called by the create_song method located in:
  SpotifyElectron/Backend/app/spotify_electron/song/serverless/song_service.py

  and in:
  SpotifyElectron/Backend/app/spotify_electron/song/blob/song_service.py

Is that correct?

[AntonioMrtz]

Thanks @AntonioMrtz ! I just wanted to confirm a few things:

* `sanitize_audio` should be implemented in:
  `SpotifyElectron/Backend/app/spotify_electron/utils/audio_management/audio_management_utils.py`

* It will be called by the `create_song` method located in:
  `SpotifyElectron/Backend/app/spotify_electron/song/serverless/song_service.py`
  and in:
  `SpotifyElectron/Backend/app/spotify_electron/song/blob/song_service.py`

Is that correct?

Yes @kanishk128 , you're correct 🎯

[AntonioMrtz]

Hi @kanishk128 are you still working in this issue :) ? If you need help with something just let me know 🖐️

[kanishk128]

Hi @AntonioMrtz yes I am, wrote the sanitize_audio function, will do the tests and create a pull request soon