Files
margin/src-tauri
pj 3572c7a6b9 fix(security): validate book id paths
load/save/delete_book built paths from the raw id, and ids round-trip
from file JSON, so a crafted id could escape the library directory.
Route all three through a book_path helper that rejects anything but
[A-Za-z0-9_-].

Claude-Session: https://claude.ai/code/session_01RzTWrLiy4zGuw2hZSQGamk
2026-06-22 13:34:51 -04:00
..
2026-06-20 23:46:10 -04:00
2026-06-22 09:56:20 -04:00
2026-06-22 13:34:51 -04:00
2026-06-22 09:56:20 -04:00
2026-06-22 12:40:29 -04:00
2026-06-22 16:50:04 +00:00
2026-06-22 16:50:04 +00:00
2026-06-22 10:12:35 -04:00