3 Commits

Author	SHA1	Message	Date
Alex Gorevski	9ef9992878	fix(automation): close ambient filesystem authorization gaps (#763) ... * fix(automation): block ambient filesystem bypasses Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d * test(automation): cover ambient path denial Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d * fix(automation): guard filesystem path authorization Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: e85c024b-ace5-4415-9208-b8d4e4684505 * automation: judge the first non-empty prefs segment; refuse any path without data prefs.set skips empty path segments, so `.scriptEvents.enabled` reached script events past the section check. Preset import / plugin.install with a whitespace path also read the filesystem. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <echelon@gmail.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com> Copilot-Session: e77cd34a-ce3e-4981-996f-4d37d49df90d Copilot-Session: e85c024b-ace5-4415-9208-b8d4e4684505	2026-10-07 17:14:03 -04:00
Gh0stly	8b1cbb741b	security: authenticate control channels and bound transport resources (#61) ... * security: authenticate and bound control transports * fix: keep connection limiter compatible with current stable	2026-10-04 13:58:59 -04:00
Gh0stly	1fe689a7bf	docs: add mdBook and security documentation foundation (#35) ... * docs: add mdBook and security documentation foundation * docs: point book links at storytold/photocraft; scope the credits entry The book's repository/edit URLs and source links pointed at the contributor's fork. The credits entry now describes what this PR contributed. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> --------- Co-authored-by: Brandon Thomas <echelon@gmail.com> Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>	2026-10-04 12:31:18 -04:00