1. Refactor err2 to use scoped loadErr variable (MINOR - sonnet-review-bot)
The else-if branches are mutually exclusive, so the error variable
should be scoped inside the block, not declared outside with err2.
2. Sanitize DisplayName before embedding in Markdown (MINOR - security-review-bot)
Remote persona metadata is untrusted. Added sanitizeMarkdownText() to
escape Markdown special characters and strip control characters.
Applied to both the header title and the footer attribution.
3. Document YAML DoS mitigations (MINOR - security-review-bot)
Added comprehensive comment in remote_persona.go explaining existing
defenses: file size limit, file count cap, depth limit, node count cap,
and alias cycle detection. These collectively mitigate billion-laughs
and stack exhaustion attacks.
Rodin
27a9be38bc