Harden booking backend against automated abuse - #50

Merged

rphlr merged 5 commits into

fix/booking-security-hardening

Jul 7, 2026

Commits on Jul 7, 2026

feat(booking): harden backend against automated abuse
rphlr
committed
6c9628f
fix(booking): stricter ICS param escaping and dotlottie-web resolution
rphlr
committed
d175313
fix(deps): remove unused axios and bump dompurify to clear prod audit
rphlr
committed
03891b5
ci(security): run audit job on Node 22 for pnpm 10.32.1 compatibility
rphlr
committed
8c6e553
fix(booking): address code review — verify D1 row counts, strip ICS control chars
rphlr
committed
d0b6924