security: percent-encode API query parameters to prevent injection#2313

Draft

cursor[bot] wants to merge 1 commit into

mainfrom

cursor/application-security-review-990d

Commits on Jun 29, 2026

fix(security): prevent Chart.js config injection into eval/HTML

cursoragent
and
sharjeelyunus
committed