fix(security): validate account names to prevent Numscript injection (EN-1200)#106

Open

flemzord wants to merge 8 commits into

mainfrom

fix/numscript-injection-validation

Commits on Jun 23, 2026

fix(security): validate account names to prevent Numscript injection

flemzord
authored and
fabrice guery
committed
fix(security): use a single-segment validator for wallet IDs and balances

flemzord
authored and
fabrice guery
committed
fix(security): close balance validation gaps

flemzord
authored and
fabrice guery
committed
docs(chart): document dash-aliasing hazard in Address.String()
fabrice guery
committed
fix(security): centralize Credit WalletID validation in Validate()
fabrice guery
committed
test(api): cover malicious wallet IDs from URL and harden debit mock
fabrice guery
committed
fix(security): allow dashes in balance names, document residual aliasing
fabrice guery
committed
test(api): dashes are valid balance names; assert success paths
fabrice guery
committed