Files
margin/src-tauri/src
pj 3572c7a6b9 fix(security): validate book id paths
load/save/delete_book built paths from the raw id, and ids round-trip
from file JSON, so a crafted id could escape the library directory.
Route all three through a book_path helper that rejects anything but
[A-Za-z0-9_-].

Claude-Session: https://claude.ai/code/session_01RzTWrLiy4zGuw2hZSQGamk
2026-06-22 13:34:51 -04:00
..
2026-06-20 23:46:10 -04:00
2026-06-22 11:42:48 -04:00
2026-06-20 12:21:22 -04:00