Fix HTML injection and harden server-side contact form handlers#2

Draft

Copilot wants to merge 3 commits into

mainfrom

copilot/fix-security-bugs-again

Commits on Feb 21, 2026

Initial plan
Copilot
committed
Fix security vulnerabilities: HTML injection, input validation, error leaking, rate limiting

Copilot
and
kulharshit21
committed
Address code review: improve email regex, add named cleanup constant

Copilot
and
kulharshit21
committed