security(padid): reject ueberdb delimiter ':' in pad ids (copyPad/movePad injection) - #8073

Merged

SamTV12345 merged 3 commits into

security/padid-colon-injection

Jul 27, 2026

Commits on Jul 25, 2026

security(padid): reject ueberdb delimiter ':' in pad ids (copyPad/movePad injection)

JohnMcLear
and
claude
committed
02e80c5
security(padid): sanitize pad URL before validating so legacy ":" URLs still redirect

JohnMcLear
and
claude
committed
6781c98

Commits on Jul 27, 2026

security(padid): keep existing pads with ":" reachable

SamTV12345
and
claude
committed
bc3687e