Address path traversal and other security fixes

2026-04-10 14:58:57 -04:00
parent e1c32b6584
commit da16fddce3
4 changed files with 19 additions and 18 deletions
--- a/src/data/mod.rs
+++ b/src/data/mod.rs
@@ -85,7 +85,7 @@ impl FromRequest for Claims {
            )
            .and_then(|header| {
                Claims::from_str(header)
-                    .with_context(|| format!("Unable to decode token from: {}", header))
+                    .with_context(|| "Unable to decode token from Authorization header")
            })
            .map_or_else(
                |e| {