Fix authorization bypass and input sanitization vulnerabilities in API routes - #1

Draft

aqzi with Copilot wants to merge 3 commits into

mainfrom

copilot/fix-security-issue

Commits on Feb 28, 2026

Initial plan
Copilot
committed
f1c2deb
Fix security vulnerabilities: add ownership checks, prevent userId spoofing, add auth to sendgrid, sanitize HTML

Copilot
and
aqzi
committed
3f98a5a
Fix status codes for server errors and remove package-lock.json from tracking

Copilot
and
aqzi
committed
fb85fd8