2 commits

Author	SHA1	Message	Date
Alexandre Brandizzi	207bf59208	fix(media): name HEIC in the unsupported-type message and keep ticket keys out of comments ... The rejection message now lists every type the media allowlist accepts, and a test fails if the message and the allowlist drift apart.	2026-09-25 02:58:15 -03:00
Alexandre Brandizzi	fd59a3da13	fix(media): enforce the 90-second video limit on the server ... Read the duration from the MP4/MOV movie header (moov/mvhd) on both the dispatcher media endpoint and the vendor portal completion upload, so a direct request cannot bypass the browser check. Unreadable metadata still never blocks an upload.	2026-09-24 21:38:00 -03:00