Skip to content

v0.0.3 - Security Fixes

Pre-release
Pre-release

Choose a tag to compare

@HarrisHan HarrisHan released this 07 Feb 03:19
· 20 commits to main since this release

πŸ”’ Security Fixes

Path Traversal (#2)

Key names now validated to prevent:

  • Path traversal (../)
  • Absolute paths (/etc/...)
  • Null bytes and control characters

File Permissions (#3)

Vault database now created with 600 permissions (owner read/write only).

Upgrade

No action needed. New vaults will have correct permissions.

For existing vaults:

chmod 600 ~/.clawbox/vault.db