Security: Fix 4 vulnerabilities — API key exposure, unauthenticated endpoints, open proxy - #43

Draft

cursor[bot] wants to merge 3 commits into

mainfrom

cursor/vulnerability-hunter-agent-73ff

Commits on Jun 23, 2026

security: add .env exclusion patterns to root .gitignore

cursoragent
and
CARBComplianceApp
committed
94e4435
security: move Gemini API key server-side and protect trigger-alert endpoint

cursoragent
and
CARBComplianceApp
committed
2027a21
security: add user email allowlist to LLM proxy API

cursoragent
and
CARBComplianceApp
committed
c424795