Skip to content

1.26.2142011

Latest

Choose a tag to compare

@PiratesIRC PiratesIRC released this 02 Aug 20:13

Fixes a file permission issue found by CodeQL during the Dispatcharr Plugin Hub submission.

The action output files are no longer readable by other users on the host. Files such as show_redaction.txt and validate_settings.txt print the list of provider hostnames derived from your own electronic programme guide sources and accounts, and each says so in its own header. They were written with mode 0644, so any other user on the machine could read them. They are now left at 0600, the mode they are created with.

The wider mode had been set only for cosmetic consistency with another plugin 's files in the same directory, and the note that set it recorded that the narrower mode had already been measured not to break reading the file from Windows. So it bought nothing.

Confirmed by measuring the mode inside a running container before and after, because the test for it skips on Windows where permission bits are not meaningful.

Everything else is unchanged from 1.26.2141913. Install instructions are in the README; remember the container restart.