Commit graph

2 commits

Author SHA1 Message Date
CI Test
7fc7f7427f fix(security): enforce registered endpoint authority
Require caller-supplied model endpoints to resolve through enabled owner-visible registrations, harden session path encoding, and remove the SVG title HTML parsing sink.
2026-10-05 22:24:15 +01:00
CI Test
059ac58cff fix(security): address CodeQL findings in migration candidate 2026-10-05 20:48:12 +01:00