Mauricio Siu fbf2ff73c2 fix(security): stop user-supplied certificatePath in create schema ...

Same drizzle-zod $defaultFn-as-optional leak as schedule appName: certificatePath
(notNull + $defaultFn) was overridable, enabling path traversal out of the certs
dir even with the escaped shell paths. Omit it from apiCreateCertificate so it is
always server-generated (completes GHSA-q9qw).

2026-07-20 17:08:32 -06:00

..

server

fix(security): stop user-supplied certificatePath in create schema

2026-07-20 17:08:32 -06:00