3 Commits

Include renames

Author	SHA1	Message	Date
3 people	9ef9992878	fix(automation): close ambient filesystem authorization gaps (#763) ... * fix(automation): block ambient filesystem bypasses Co-authored-by: Copilot <[email protected]> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d * test(automation): cover ambient path denial Co-authored-by: Copilot <[email protected]> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d * fix(automation): guard filesystem path authorization Co-authored-by: Copilot <[email protected]> Copilot-Session: e85c024b-ace5-4415-9208-b8d4e4684505 * automation: judge the first non-empty prefs segment; refuse any path without data prefs.set skips empty path segments, so `.scriptEvents.enabled` reached script events past the section check. Preset import / plugin.install with a whitespace path also read the filesystem. Co-Authored-By: Claude Opus 5.5 <[email protected]> --------- Co-authored-by: Brandon Thomas <[email protected]> Co-authored-by: Claude Opus 5.5 <[email protected]> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d Copilot-Session: e85c024b-ace5-4415-9208-b8d4e4684505	2026-10-07 17:14:03 -04:00
Gh0stly	8b1cbb741b	security: authenticate control channels and bound transport resources (#61) ... * security: authenticate and bound control transports * fix: keep connection limiter compatible with current stable	2026-10-04 13:58:59 -04:00
3 people	1fe689a7bf	docs: add mdBook and security documentation foundation (#35) ... * docs: add mdBook and security documentation foundation * docs: point book links at storytold/photocraft; scope the credits entry The book's repository/edit URLs and source links pointed at the contributor's fork. The credits entry now describes what this PR contributed. Co-Authored-By: Claude Opus 5.5 <[email protected]> --------- Co-authored-by: Brandon Thomas <[email protected]> Co-authored-by: Claude Opus 5.5 <[email protected]>	2026-10-04 12:31:18 -04:00