From 40633f33c8f1bebbc48fc146af8d8b1a0efaa298 Mon Sep 17 00:00:00 2001 From: Tobias Gesellchen Date: Sun, 31 May 2026 22:20:47 +0200 Subject: [PATCH] docs(web): trim the Play URL aside from the TTS view's SSRF note Co-Authored-By: Claude Opus 4.8 (1M context) --- pkg/service/soundtouchweb/static/js/components/TTS.js | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/pkg/service/soundtouchweb/static/js/components/TTS.js b/pkg/service/soundtouchweb/static/js/components/TTS.js index 1398d89..5aa8921 100644 --- a/pkg/service/soundtouchweb/static/js/components/TTS.js +++ b/pkg/service/soundtouchweb/static/js/components/TTS.js @@ -68,8 +68,7 @@ export function TTS({ devices, serverServiceUrl }) {
The service URL is fixed server-side and can't be edited here: soundtouch-web makes the request itself, so a browser-supplied URL would let anyone use it as - an SSRF proxy. (Play URL differs — its URL is handed to the speaker, not fetched - here.) + an SSRF proxy. ${status && html`
${status}
`}