Fix/codeql remediation pr455#458

Merged

ginccc merged 9 commits into

mainfrom

fix/codeql-remediation-pr455

Apr 27, 2026

Commits on Apr 26, 2026

fix(security): remediate CodeQL findings — array bounds, arithmetic overflow, log injection
ginccc
committed
docs: update changelog with CodeQL remediation entry
ginccc
committed
refactor(security): consolidate 6 duplicated sanitizeForLog() into LogSanitizer.sanitize()
ginccc
committed
fix(security): sanitize remaining inconsistent log sites in ToolCacheService and EmbeddingStoreFactory
ginccc
committed
test(security): add comprehensive tests for LogSanitizer, CronDescriber bounds, and pagination clamping
ginccc
committed
fix(security): address PR review — char-loop sanitizer for CodeQL, debug log guards, brace style, RestRagIngestion
ginccc
committed
Merge branch 'main' into fix/codeql-remediation-pr455
ginccc
authored
fix(security): sanitize all user-provided values in MCP client logs to resolve CodeQL log injection
ginccc
committed

Commits on Apr 27, 2026

fix(security): address PR #455 CodeRabbit review findings
ginccc
committed