Skip to content

Harden filesystem security for release candidate - #2

Merged
AbassHammed merged 4 commits into
masterfrom
codex/security-rc-hardening
Jun 16, 2026
Merged

Harden filesystem security for release candidate#2
AbassHammed merged 4 commits into
masterfrom
codex/security-rc-hardening

Conversation

@AbassHammed

Copy link
Copy Markdown
Contributor

Summary

  • harden iOS raw path handling, filename validation, and bookmark identifiers
  • validate Android raw, SAF, and MediaStore relative paths and rename targets
  • fail plugin setup on invalid protocol scope configuration
  • document the security model and refresh supported dependency/tooling baselines

Verification

  • npm run check
  • npm run test:ios
  • npm run test:android:jvm
  • cargo audit
  • npm audit --omit=dev
  • npm outdated --long

Notes: cargo-audit still reports allowed warnings from transitive Tauri GTK/unic dependencies, but no vulnerabilities. AGP 9/Kotlin 2.4 were tested and are not compatible with the current Tauri generated Android support project, so Android was updated to the latest working supported set: AGP 8.13.2, Kotlin 2.2.21, Gradle 9.5.1.

@AbassHammed AbassHammed self-assigned this Jun 16, 2026
@AbassHammed
AbassHammed merged commit e7d8c7b into master Jun 16, 2026
3 checks passed
@AbassHammed
AbassHammed deleted the codex/security-rc-hardening branch June 16, 2026 10:32
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant