fix: security and infra fixes (#36, #37, #43, #44)#49

Merged

jacaudi merged 6 commits into

mainfrom

feature/security-infra-fixes

Apr 11, 2026

Commits on Apr 11, 2026

fix: set ECDH importKey extractable to false (#36)

jacaudi
and
claude
committed
fix: set importEcdhPub extractable to false, strengthen test coverage (#36)

jacaudi
and
claude
committed
fix: sanitize filenames in download_ab (#37)

jacaudi
and
claude
committed
test: assert sanitizeFilename strips slashes and null bytes (#37)

jacaudi
and
claude
committed
chore: add .dockerignore to reduce build context (#43)

jacaudi
and
claude
committed
chore: pin alpine base image to :3 in fonts stage (#44)

jacaudi
and
claude
committed