Skip to content

1.1.1

Choose a tag to compare

View all tags
@686f6c61 686f6c61 released this 28 Aug 11:56
· 5 commits to main since this release
v1.1.1
3d7321a

2026-08-28

Security hardening after the Omarchy marketplace review.

Security

  • No more fixed, unauthenticated DevTools port: the webapp now launches with
    --remote-debugging-port=0, so Chromium picks a random ephemeral port that
    helpers discover through the DevToolsActivePort file inside the
    0700-permission profile directory.
  • WebSocket client hardened: exact loopback hosts only, and hard caps on
    frame (1 MiB) and reassembled message (4 MiB) sizes, enforced before any
    allocation or accumulation.
  • Mailbox sender/subject/time text forced to Text.PlainText in the dropdown
    so crafted messages can never be parsed as rich text.
  • Installer no longer downloads mutable remote assets: the Proton Mail PNG
    and SVG ship vendored (and reviewed) in the repo under assets/.
  • External-link guard now allowlists exact parsed hostnames
    (proton.me, protonmail.com, protonvpn.com and their subdomains)
    instead of substring matching, and helper processes run with timeouts and
    intrinsically bounded output.
Assets 2
Loading