security: restrict AJAX during upgrade and escape installer config writes#706

Merged

RussH merged 2 commits intoopencats:masterfrom

anonymoususer72041:security/restrict-ajax-during-upgrade

Apr 21, 2026

Commits on Apr 15, 2026

Restrict ajax.php to installer actions when INSTALL_BLOCK is missing
anonymoususer72041
committed
Escape installer config values before writing config.php
anonymoususer72041
committed