Security fixes: path traversal, filename injection, input validation, error leakage#204

Draft

Copilot wants to merge 3 commits intodevelopmentfrom

copilot/review-project

Commits on Apr 1, 2026

chore: Dependencies
SvenFinn
committed
fix: security issues - path traversal, filename sanitization, input validation, error leakage

Copilot
and
SvenFinn
committed
refactor: move resolveSafePath to shared lib, use sanitize-filename, fix evaluations path check

Copilot
and
SvenFinn
committed