copilot-swe-agent[bot]
d7a7915f8b
- Add collection name validation and sanitization (POST/PUT) - Add library items count and size limits - Add UUID/safe ID validation for route parameters - Add Socket.io event input validation and sanitization - Tighten CSP with base-uri, form-action directives and HSTS header - Add timestamped backup rotation (keep 5 most recent) for db import - Add path traversal protection for file uploads and archive names - Add global error handler to prevent stack trace leakage - Add 21 new security tests Co-authored-by: ZimengXiong <83783148+ZimengXiong@users.noreply.github.com>