Security hardening — round 8: 5 confirmed defects - #18

Merged

REPPL merged 6 commits into

mainfrom

security-hunt/round-8

Aug 13, 2026

Commits on Aug 13, 2026

fix: sanitise discovered collection metadata to primitives
claude
committed
bc00177
fix: cap auto-discovered entity fields rendered per card
claude
committed
8078177
fix: correct forced cardBackStyle/titleDisplayMode allowlists
claude
committed
92a24da
fix: preserve collection-defaults marker across a replace import
claude
committed
c330002
fix: restrict imported edit field values to JSON primitives
claude
committed
fc47a4a
docs: log round 8 security-hardening decisions
claude
committed
f82ec85