[Bug] GenerateSkillModal sends the user's access token to an arbitrary external host (and in the JSON body)#1116

Merged

chronoai-shining merged 3 commits into

develop-autofrom

auto/fix/1037-bug-generateskillmodal-sends-the-user-s

Jun 15, 2026

Commits on Jun 15, 2026

refactor(web): extract shared MAX_UPLOAD_FILE_SIZE_BYTES constant (#1037)
chronoai-shining
committed
fix(web): harden GenerateSkillModal token handling + upload cap (#1037)
chronoai-shining
committed
docs: changeset for GenerateSkillModal security hardening (#1037)
chronoai-shining
committed