Skip to content

v2.2.1 - Cross-Platform File Permissions Fix

Choose a tag to compare

@rosschurchill rosschurchill released this 11 Dec 07:34
· 6 commits to main since this release

Chrome MCP Secure v2.2.1

Cross-Platform File Permissions Fix

Fixed

  • All file operations now use centralized file-permissions.ts utility
    • Fixed 12 instances of insecure fs.mkdirSync() and fs.writeFileSync() calls
    • Proper Windows ACL support via icacls
    • Consistent 0o700 directory and 0o600 file permissions on Unix

Files Updated

File Changes
crypto.ts Uses mkdirSecure() and writeFileSecure()
credential-vault.ts Uses mkdirSecure() and writeFileSecure()
secure-memory.ts Deprecated internal functions, delegates to file-permissions.ts
mcp-auth.ts Uses mkdirSecure() and writeFileSecure()
logger.ts Audit log directory uses mkdirSecure()

This is the same fix applied to notebooklm-mcp-secure v1.5.1.

Full Changelog

See CHANGELOG.md