J3vb/OwnCord
1
0
Fork 0
mirror of https://github.com/J3vb/OwnCord.git synced 2026-09-03 03:50:00 +03:00
Code Issues Packages Projects Releases Wiki Activity
Files
485040be320c8f23a3f08bbd7b1b064f313f4fbd
OwnCord/Client
T
History
J3vb 485040be32 security: validate avatar URLs on server and client 
- Add validateAvatarURL helper enforcing https:// scheme, non-empty host, and 512-char max length
- Add rate limiting (10/min) to PATCH /api/v1/users/me profile update endpoint
- Guard avatar rendering in DmSidebar, DmProfileSidebar, and UserProfilePopup with isSafeUrl check to prevent unsafe URL injection in the UI
2026-04-03 08:10:26 +02:00
..
tauri-client
security: validate avatar URLs on server and client
2026-04-03 08:10:26 +02:00