Kayvan Sylvan f37c71f9f7 fix: secure storage paths and authenticate REST and Ollama servers ... - Reject unsafe cross-platform storage names and traversal attempts. - Confine symlink targets within configured filesystem storage directories. - Require API keys for every non-loopback server binding. - Authenticate Ollama routes and securely forward configured credentials. - Validate chat pattern, context, and session names early. - Sanitize client errors to hide internal filesystem details. - Default REST server binding to loopback port 8080. - Add regression coverage for traversal, symlinks, and authentication.		2026-09-02 15:59:59 -07:00
..
fsdb	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00
api.go	fix: secure storage paths and authenticate REST and Ollama servers	2026-09-02 15:59:59 -07:00