Skip to content

v0.5.0

Choose a tag to compare

View all tags
@daniloaguiarbr daniloaguiarbr released this 16 Apr 20:15
· 42 commits to main since this release
v0.5.0
47d7075

v0.5.0 — Security Hardening (2026-04-16)

Source-only release (binários multi-plataforma disponíveis a partir de v0.6.0).

Instalação: `cargo install duckduckgo-search-cli --version 0.5.0`

Security

  • Path traversal validation on `--output` — rejects `..` components and writes to system directories (`/etc`, `/usr`, `C:\Windows`).
  • Proxy credential masking — error messages no longer expose passwords from `--proxy http://user:pass@host\` URLs.

Added

  • `src/paths.rs` — centralized path validation, parent directory creation, and Unix permission application.
  • `src/signals.rs` — centralized SIGPIPE restoration (Unix) and Ctrl+C/SIGINT handler (cross-platform).
  • `ErroCliDdg` enum with `thiserror` — 11 typed error variants with `exit_code()` and `codigo_erro()` methods.
  • `mascarar_url_proxy()` in `http.rs` — redacts credentials from proxy URLs in error context.
  • 21 new unit tests across `paths.rs`, `signals.rs`, `error.rs`, and `http.rs`.

Changed

  • `thiserror = "2"` added to dependencies for structured domain errors.
  • `src/main.rs` reduced from 63 to 23 lines — signal handling extracted to `signals.rs`.
  • `src/output.rs` file writes now validate paths via `paths::validar_caminho_saida()` before I/O.

Full Changelog: v0.4.4...v0.5.0

Full Changelog: v0.4.3...v0.5.0

Assets 8
Loading