Mauricio Siu fbf2ff73c2 fix(security): stop user-supplied certificatePath in create schema ... Same drizzle-zod $defaultFn-as-optional leak as schedule appName: certificatePath (notNull + $defaultFn) was overridable, enabling path traversal out of the certs dir even with the escaped shell paths. Omit it from apiCreateCertificate so it is always server-generated (completes GHSA-q9qw).		2026-07-20 17:08:32 -06:00
..
server	fix(security): stop user-supplied certificatePath in create schema	2026-07-20 17:08:32 -06:00