v0.6.0 — Security Hardening & Architecture Cleanup
v0.6.0 — Security Hardening & Architecture Cleanup
11 issues fixed. 309 tests. Zero open issues.
Security
- URL sanitization wired into all formatters (was dead code)
- Markdown table injection fixed across 25+ formatters
- Per-CSV row limit (100k) for ZIP bomb protection
- Content length truncation with warnings
Architecture
- Monolithic parser.py/formatter.py removed (~2600 lines)
- ProfileFormatter contract fixed, converter special-case eliminated
- Registration decoupled from instantiation
- 47 redundant empty-data guards removed via BaseFormatter template method