v2.4.4

Security

• Profile Path Traversal: Reject profile names containing path separators or traversal sequences to prevent arbitrary filesystem delete/create/symlink. safeName validation now requires names to resolve to a direct child of PROFILES_DIR, rejecting ., .., path separators, absolute and empty names (#55, fixes #54).
• Localhost Binding: Bind the server listener to 127.0.0.1 so unauthenticated profile/auth endpoints are not reachable from the network.

---

Full Changelog: v2.4.3...v2.4.4