fix(security): comprehensive security audit remediations#12

Merged

DavidLambauer merged 18 commits intomainfrom

fix/security-audit-remediations

Apr 14, 2026

Commits on Apr 10, 2026

fix(security): sanitize conversation history and filter system prompt from response
DavidLambauer
committed
fix(security): harden SQL sandbox and sanitize error messages
DavidLambauer
committed
fix(security): add per-admin rate limiting to AI chat endpoint
DavidLambauer
committed
fix(security): add Subresource Integrity (SRI) to CDN script tags
DavidLambauer
committed
fix(security): add audit logging for AI SQL queries
DavidLambauer
committed
fix(security): add 60-second wall-clock timeout to AI agent loop
DavidLambauer
committed
fix(security): remove HttpGetActionInterface from CategoryMerchandiser Save
DavidLambauer
committed

Commits on Apr 14, 2026