Repository navigation
Security hardening release.
- Temporary scripts and output now go to a private folder inside your data folder instead of the shared /tmp.
- The blocked-commands list now covers all ways of running commands. It is a guard against mistakes, not a security boundary.
- The remote server now limits request size.
- WCR_HOME now refuses unsafe locations such as your home folder or the root folder.
Upgrading is recommended. Details are in a security advisory that will be published later.