v0.1.49

Highlights

• 🔒 Security hardening. A review of every open code scanning alert. One was a real defect: creating a worker from the API accepted a name with ../ and could write outside the apps/ folder; the name must now be plain letters, digits and dashes. The rest tighten code that was already guarded: every path built from a request is resolved inside its folder (worker logs, agent files, uploads), the API has a cap on requests per client that normal use never reaches, the About window's links are fixed addresses, and two patterns that could be slowed down by crafted input are gone.

What's Changed

• security: a cap on every request, request paths kept inside their folders, and the other open code scanning alerts by @TraX22 in #123

Full Changelog: v0.1.48...v0.1.49