Security fix for CVE-2025-12735, CVE-2025-13204, and member function bypass#6

Merged

Sander-Toonen merged 6 commits intomasterfrom

copilot/fix-security-issues-patch

Dec 29, 2025

Commits on Dec 29, 2025

Initial plan
Copilot
committed
Add security protections for CVE-2025-12735, CVE-2025-13204, and Issue #289

Copilot
and
Sander-Toonen
committed
Fix code review issues: add validateAllowedFunction to IFUNCALL, use counter-based keys for inline functions

Copilot
and
Sander-Toonen
committed
Update tests to use secure function registration pattern and add BREAKING_CHANGES.md

Copilot
and
Sander-Toonen
committed
Fix TypeScript type error in security test

Copilot
and
Sander-Toonen
committed
Bump version to 5.0.0 for breaking changes per semantic versioning

Copilot
and
Sander-Toonen
committed