Commit graph

2 commits

Author SHA1 Message Date
Alexandre Teixeira
9ee614e2ac fix(security): enforce registered endpoint authority
Require caller-supplied model endpoints to resolve through enabled owner-visible registrations, harden session path encoding, and remove the SVG title HTML parsing sink.
2026-10-05 22:24:15 +01:00
Alexandre Teixeira
481726acf2 fix(security): address CodeQL findings in migration candidate 2026-10-05 20:48:12 +01:00