- Add CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy headers to next.config.ts
- Eliminate dangerouslySetInnerHTML in FormJsonToggle by switching to React.ReactNode
- Add log injection prevention via SanitizeLogMessage in AgentLogger
- Migrate deprecated WebClient to HttpClient in SelfUpdater with native timeouts
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>