security: fix SQL-injection and path-injection (CodeQL)#794

Merged

intel352 merged 2 commits into

mainfrom

sec/fix-injection-vulns-20260529

May 29, 2026

Commits on May 29, 2026

security: fix SQL-injection and path-injection (CodeQL alerts #56-61, #14)

intel352
and
claude
committed
security: address adversarial review (wire SetDataDir, default-deny path read, revert-sensitive tests)

intel352
and
claude
committed