mirror of
https://github.com/PerpetualSoftware/pad.git
synced 2026-09-22 02:23:46 +00:00
f7ac533ec1
- Fix SQL injection in sort parameter: validate field names against alphanumeric regex before interpolating into json_extract queries - Restrict CORS to localhost origins only (remove http://* wildcard) - Change Makefile HOST default from 0.0.0.0 to 127.0.0.1 - Add Apache-2.0 license field to web/package.json