Fix bugs in Remove Image Object feature

[Copilot]

Three bugs in the "remove object from image" feature: loading state stuck on validation failure, insecure Cloudinary URLs in production, and multer temp files never cleaned up.

Changes

• RemoveObject.jsx — Early return on multi-word object validation skipped setLoading(false), leaving the button permanently disabled. Moved to a finally block.

• aiController.js — removeImageObject — cloudinary.url() emits HTTP by default; added secure: true to avoid mixed-content failures on HTTPS deployments.

• aiController.js — removeImageObject + removeImageBackground — Multer temp files were never deleted after upload. Added a deleteTempFile() helper that validates the path is within os.tmpdir() (path-traversal guard) before async deletion.

const deleteTempFile = (filePath) => {
    const resolvedPath = path.resolve(filePath);
    if (resolvedPath.startsWith(path.resolve(os.tmpdir()))) {
        fs.promises.unlink(resolvedPath).catch((err) => console.error("Failed to delete temp file:", err));
    }
};

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
visible-server	Ready	Preview, Comment	Apr 1, 2026 6:49pm
visiblekai	Ready	Preview, Comment	Apr 1, 2026 6:49pm