Fluiddesk v1.0.1-beta

[grump1290-code]

Pre-Release Update: Security Hardening & File-Handling Refactor

This update focuses on strengthening the application's core file infrastructure, improving data isolation, and optimizing background rendering behaviors for a more stable user experience.

Key Changes:

• Enhanced File Validation Architecture: Refactored the asset discovery loop to perform deeper structural inspection of media containers (.webm and .mp4). The engine now proactively detects and filters out corrupted or invalid files before they hit the rendering pipeline or thumbnail generator.
• Secure Path Boundaries: Implemented strict directory containment checks within the preset manager. This guarantees that configurations can only resolve and load files located strictly within the designated application asset directories.
• Isolated Application Storage: Shifted temporary asset compilation and caching processes away from global system directories.
  • Dynamic canvas environments are now initialized with randomized session tokens and strict single-user read/write access permissions.
  • Thumbnail storage has been moved permanently to a secure user-space cache directory (~/.cache/), preventing directory conflicts or interference from external background scripts.

---

This discussion was created from the release Fluiddesk v1.0.1-beta.