Security fixes from audit v0.0.71 - #57

Merged

melvincarvalho merged 7 commits into

JavaScriptSolidServer:gh-pagesfrom

jjohare:gh-pages

Jan 5, 2026

Commits on Jan 5, 2026

security: fix path traversal vulnerability in git handler

jjohare
and
claude
committed
0b1b5b4
security: block requests on DNS resolution failure

jjohare
and
claude
committed
4dbf039
security: add DPoP jti replay attack prevention

jjohare
and
claude
committed
b10ad65
security: use iterative sanitization for podName in subdomain mode

jjohare
and
claude
committed
2569811
security: use safeJsonParse in WAC ACL parser for DoS protection

jjohare
and
claude
committed
204fdfb
security: add minimum password length validation

jjohare
and
claude
committed
1feead2
docs: update security audit report (v0.0.71)

jjohare
and
claude
committed
abc8165