Repository navigation

v1.4.13

Michi4 released this 22 Sep 17:36

· 8 commits to main since this release

a043e34

Tabby Android v1.4.13

Vault YAML-safety: fail closed, never destroy the vault

Hex salts like 12e34… were dumped unquoted; Tabby desktop (js-yaml) reads them as float/Infinity and its next save persists keySalt: .inf, permanently destroying the vault. Our dumps now force single quotes around keySalt/iv/contents scalars.
Generated salts/IVs are retried until the hex contains one of a,b,c,d,f, so our own output is always YAML-safe.
A vault: block that is present but unparseable now fails closed (Invalid vault) on both pull and push — never mistaken for "no profiles", never merged over with cleartext.
Unit tests pass (58 sync tests, 0 failures).

Assets 3