fix: security hardening#5

Merged

skyoo2003 merged 10 commits into

mainfrom

fix/security-hardening

Apr 19, 2026

Commits on Apr 19, 2026

fix: security hardening — XSS, SQL injection, root containers, pinned actions
skyoo2003
committed
fix: address code review feedback on security hardening
skyoo2003
committed
style: refactor validateIdentifier to satisfy staticcheck QF1001
skyoo2003
committed
style: apply De Morgan's law to satisfy staticcheck QF1001
skyoo2003
committed
fix: address second round of code review feedback
skyoo2003
committed
fix: address third round of code review feedback
skyoo2003
committed
fix: harden Content-Type XSS guard against comma-separated media types
skyoo2003
committed
fix: trim whitespace on table/idCol before validation; gate entrypoint chown
skyoo2003
committed
fix: make entrypoint stat fail-open; add whitespace/leading-comma test cases
skyoo2003
committed
fix: normalize cols, extend HTML detection, add version tag comments
skyoo2003
committed