5a7d321

Fix remaining HIGH/MEDIUM audit findings: F2-2 (hierarchy fix), F3-2 (IPv6 SSRF), F5-1 (htaccess), F4-1 (MCP errors), F4-4 (batch limit), F3-1 (zip-slip), F2-1 (user create hierarchy)

2026-07-10T18:41:55+00:00

Anton Barinov <55404783+Anton-Barinov@users.noreply.github.com>

Files12

Core0

Module0

Forbidden0

Files

api/.htaccess (api)
api/controller/mcp/McpController.php (api)
api/system/library/module/ModuleRemoteInstaller.php (api)
api/system/library/policy/HierarchyPolicy.php (api)
api/system/library/security/UrlSafetyValidator.php (api)
api/system/library/service/UserService.php (api)
api/.htaccess (api)
api/controller/mcp/McpController.php (api)
api/system/library/module/ModuleRemoteInstaller.php (api)
api/system/library/policy/HierarchyPolicy.php (api)
api/system/library/security/UrlSafetyValidator.php (api)
api/system/library/service/UserService.php (api)