Skip to content

1.1.4

Choose a tag to compare

View all tags
@686f6c61 686f6c61 released this 29 Aug 07:52
· 1 commit to main since this release
v1.1.4
b141721

2026-08-28

Third marketplace review round: hardening of the broker's local boundary.

Security

  • Broker API is now read-only (recent only; the selftest diagnostic was
    removed) and client authorization goes beyond SO_PEERCRED: the peer
    process must be the Python interpreter running exactly this plugin's
    installed client script. The broker docstring states the residual same-uid
    exposure honestly (truncated metadata of the last N messages; no bodies,
    no session, no JS execution).
  • The broker refuses to start without a trusted per-user XDG_RUNTIME_DIR
    (no /tmp fallback) and creates/opens its subdirectory, lock and socket
    relative to a validated directory descriptor with O_NOFOLLOW.
  • hyprctl clients -j output is capped at 256 KiB on the producer side (and
    time-bounded) in both omarchy-protonmail-unread and
    omarchy-protonmail-focus-or-launch.
  • omarchy-protonmail-recent caps broker replies at 64 KiB and normalizes
    the exact schema, record count and field lengths before QML parses them.
Assets 2
Loading