fix(api): escape json body in api calls to prevent injection#1072

Merged

Spiral-Memory merged 3 commits intoRocketChat:developfrom

deepak0x:fix/json-injection-issue-1

Jan 21, 2026

Commits on Jan 15, 2026

fix(api): escape json body in api calls to prevent injection
deepak0x
committed
Merge remote-tracking branch 'upstream/develop' into fix/json-injection-issue-1
deepak0x
committed

Commits on Jan 16, 2026

fix(api): replace manual JSON string construction with JSON.stringify to prevent injection
deepak0x
committed