SteelDynamite/onyx-tasks

Fork 0

Commit graph

Author	SHA1	Message	Date
Tristan Michael	68f1bff93b	fix: prevent path traversal, enable CSP, and harden URL domain extraction Validate that resolved list paths stay within the workspace root to prevent directory traversal via malicious list names. Enable Content Security Policy in Tauri config instead of leaving it null. Fix CLI domain extraction to strip userinfo (user:pass@) from URLs before using as keyring service name.	2026-04-02 09:35:38 -07:00
Tristan Michael	27363c8424	rename onyx-cli crate (formerly bevy-tasks-cli)	2026-03-31 09:47:02 -07:00

Author

SHA1

Message

Date

Tristan Michael

68f1bff93b

fix: prevent path traversal, enable CSP, and harden URL domain extraction

Validate that resolved list paths stay within the workspace root to prevent
directory traversal via malicious list names. Enable Content Security Policy
in Tauri config instead of leaving it null. Fix CLI domain extraction to
strip userinfo (user:pass@) from URLs before using as keyring service name.

2026-04-02 09:35:38 -07:00

Tristan Michael

27363c8424

rename onyx-cli crate (formerly bevy-tasks-cli)

2026-03-31 09:47:02 -07:00

2 commits