Resolve audited open issues - #335

Merged

baixiangcpp merged 15 commits into

mainfrom

fix/open-issue-audit-2026-07

Jul 16, 2026

Commits on Jul 15, 2026

Fix regex worker isolation failures (#330)
baixiangcpp
committed
f13461f

Commits on Jul 16, 2026

Reject disguised SVG raster uploads (#311)
baixiangcpp
committed
d41f578
Validate TOTP secrets and counters (#331)
baixiangcpp
committed
4f286ac
Generate direct tool route redirects (#327)
baixiangcpp
committed
06c9d03
Validate ID generator inputs (#334)
baixiangcpp
committed
c22d6e0
Fix quote-aware cURL parsing (#328)
baixiangcpp
committed
782db5b
Fix HTTP code generation semantics (#329)
baixiangcpp
committed
412352e
Fix QR browser downloads (#323)
baixiangcpp
committed
1e51b60
Fix lossy CSV structure handling (#332)
baixiangcpp
committed
243d8ca
Make tool input ownership explicit (#322)
baixiangcpp
committed
863f870
Add browser-local QR image decoding (#324)
baixiangcpp
committed
1071878
Harden spreadsheet-safe CSV exports (#333)
baixiangcpp
committed
770d3e0
Fix first-load theme and layout shifts (#320)
baixiangcpp
committed
c97948e
Normalize route container width contracts (#321)
baixiangcpp
committed
e562003
Classify tool input sizing intents (#325)
baixiangcpp
committed
c2ce2e1