Fluiddesk v1.0.1-beta
Pre-release
Pre-release
·
2 commits
to main
since this release
Pre-Release Update: Security Hardening & File-Handling Refactor
This update focuses on strengthening the application's core file infrastructure, improving data isolation, and optimizing background rendering behaviors for a more stable user experience.
Key Changes:
- Enhanced File Validation Architecture: Refactored the asset discovery loop to perform deeper structural inspection of media containers (
.webmand.mp4). The engine now proactively detects and filters out corrupted or invalid files before they hit the rendering pipeline or thumbnail generator. - Secure Path Boundaries: Implemented strict directory containment checks within the preset manager. This guarantees that configurations can only resolve and load files located strictly within the designated application asset directories.
- Isolated Application Storage: Shifted temporary asset compilation and caching processes away from global system directories.
- Dynamic canvas environments are now initialized with randomized session tokens and strict single-user read/write access permissions.
- Thumbnail storage has been moved permanently to a secure user-space cache directory (
~/.cache/), preventing directory conflicts or interference from external background scripts.