 copilot-swe-agent[bot]andZimengXiong
|
d7a7915f8b
|
Add security hardening: input validation, CSP headers, backup rotation, error handling
- Add collection name validation and sanitization (POST/PUT)
- Add library items count and size limits
- Add UUID/safe ID validation for route parameters
- Add Socket.io event input validation and sanitization
- Tighten CSP with base-uri, form-action directives and HSTS header
- Add timestamped backup rotation (keep 5 most recent) for db import
- Add path traversal protection for file uploads and archive names
- Add global error handler to prevent stack trace leakage
- Add 21 new security tests
Co-authored-by: ZimengXiong <[email protected]>
|
2026-02-06 22:33:44 +00:00 |
|