magdev 35d802c2b8 Security improvements and API compatibility fixes (v0.3.6) ...

- Add recursive key sorting for response signing compatibility
- Fix IP header spoofing in rate limiting with trusted proxy support
- Add CSRF protection to CSV export with nonce verification
- Explicit Twig autoescape for XSS prevention
- Escape status values in CSS classes
- Update README with security documentation and trusted proxy config
- Update translations for v0.3.6

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-23 21:18:32 +01:00

6.3 KiB

Raw Blame History

View Raw