fix: Session Fixation and CSV Injection vulnerabilities#670

Open

qiuluoli wants to merge 2 commits into

ryanhowdy:masterfrom

qiuluoli:fix/session-fixation-csv-injection

Commits on May 14, 2026

fix: regenerate session ID after login to prevent session fixation (Fixes #537)
qiuluoli
committed
fix: sanitize CSV export to prevent CSV injection (Fixes #539)
qiuluoli
committed