Security review: fix injection, at-rest and network leaks (TDD) - #64

Merged

JordanCoin merged 17 commits into

mainfrom

claude/openfoia-security-review-655vmy

Aug 10, 2026

Commits on Aug 9, 2026

Fix critical injection paths from untrusted documents
claude
committed
54c3260
Close data-at-rest, network and gateway leaks
claude
committed
e4bdc5e
Fix metadata leaks, resource caps and remaining hardening
claude
committed
c0bfe3f
Restrict database file permissions to owner-only
claude
committed
fb4bc6e
Address review feedback and make lint deterministic
claude
committed
27f0203
Make encryption installable and test the real crypto paths in CI
claude
committed
00f6c9d
Eliminate deprecated utcnow() and fix a local-time deadline bug
claude
committed
800216b
Widen the ruff rule set and fix the findings
claude
committed
ec42ba9
Run CI on every pull request, not only those targeting main
claude
committed
3ee8fff
Fix type annotations flagged by mypy in templates.py
claude
committed
c9a9383

Commits on Aug 10, 2026