Adam Moussa f4111e4e17 Fix polynomial ReDoS in Bearer-token extraction (CodeQL js/polynomial-redos) ... extractBearerToken matched /^Bearer\s+(.+)$/ — \s and . both match a space, so the two quantifiers overlap and a crafted header can drive polynomial backtracking. Require the capture to start with a non-whitespace char (/^Bearer\s+(\S.*)$/), removing the ambiguity → linear match. Behavior is unchanged for real tokens; +2 regression tests.		2026-06-26 13:06:27 -04:00
..
src	Fix polynomial ReDoS in Bearer-token extraction (CodeQL js/polynomial-redos)	2026-06-26 13:06:27 -04:00
package.json	Address CodeQL findings: bound ajv error work + edge rate limiting	2026-06-26 13:01:12 -04:00
tsconfig.json	Phase 0b slice: monorepo scaffold + @sh-mcp/shared core + integration packages (#2)	2026-06-26 12:42:17 -04:00