Skip to content

Security & privacy fixes: command injection, CORS, path validation, leaked config#2

Merged
bshepp merged 2 commits into
mainfrom
fix/privacy-and-injection
May 17, 2026
Merged

Security & privacy fixes: command injection, CORS, path validation, leaked config#2
bshepp merged 2 commits into
mainfrom
fix/privacy-and-injection

Harden CORS + validate client paths; dedupe shouldSkipDirectory

947a0b7
Select commit
Loading
Failed to load commit list.

Select a check to view from the sidebar