You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
fix(security): prevent path traversal and refine HTTP server controls
- Enhance path normalization in `Dispatcher` and `HttpServer` to properly validate base directory boundaries and prevent directory traversal attacks.
- Update `sanitizeUri` in `HttpServer` to return a normalized `Path` and support longer URIs (up to 2048 chars).
- Hide sensitive exception details in HTTP 500 responses unless the environment is set to 'development'.
- Mark session cookies as `Secure` when requests are served over HTTPS.
- Update `maven-assembly-plugin` to version 3.7.1.
- Bump project version to 1.7.28.