globbestael

Runs a full security review of DedupEndNote covering OWASP Top 10 plus DoS and resource-exhaustion risks. Use when the user asks for a security review, security audit, vulnerability check, or mentions OWASP. Already-fixed risks (path traversal, DOM XSS, error exposure, actuator hardening) are noted as closed so the review focuses on remaining concerns: DoS via large uploads and unbounded concurrent runs, user file namespace collisions in the shared upload directory, WebSocket topic access, missing HTTP security headers, and RIS input content validation. Outputs a prioritised finding list with severity, location, and recommended fix.