fix(security): prevent HTML injection in BCOS badge generator#4856

Open

IgorGanapolsky wants to merge 3 commits into

Scottcjn:mainfrom

IgorGanapolsky:security-fix-4827

Commits on May 11, 2026

fix: validate block height is non-negative in calculate_block_reward
actions-user
committed
fix(security): use constant-time comparison for admin keys to prevent timing attacks
actions-user
committed

Commits on May 12, 2026

fix(security): validate and encode cert_id in badge generator to prevent HTML injection
actions-user
committed