Security hardening — round 9: 9 confirmed defects - #19

Merged

REPPL merged 11 commits into

mainfrom

security-hunt/round-9

Aug 13, 2026

Commits on Aug 13, 2026

fix: bound relationship definitions and single-file entity arrays
REPPL
committed
60aee6c
fix: cap discovered field options in the settings panel
REPPL
committed
2ec5f5a
fix: cap per-card detail links to bound the sources overlay
REPPL
committed
7b37908
fix: cap untrusted rank-placeholder and UI label length
REPPL
committed
68c812e
fix: bound searchFields and label length on the settings-import path
REPPL
committed
3e09b1d
fix: align the platform and genre filters with their option fields
REPPL
committed
470af75
fix: migrate persisted sources across store version bumps
REPPL
committed
7cd92e7
fix: preserve the collection-defaults source marker across replace import
REPPL
committed
7817c3d
docs: record round 9 in the decisions log
REPPL
committed
c8482d1
fix: show each filter's own option count in the add-filter dropdown
REPPL
committed
d4ac470
fix: cap platform-overlay detail links too
REPPL
committed
766ae28