2 Commits

Author	SHA1	Message	Date
julien	f293d35455	fix(herowars): replace Object.assign with explicit field whitelists ... Mass assignment via Object.assign(entity, req.body) allowed callers to overwrite protected fields (id, author). Updates are now restricted to explicitly listed data fields on both Clan and Member.	2026-04-26 20:42:29 +02:00
julien	d8195dbf31	Controller and Model updates	2026-03-21 02:30:46 +01:00