Skip to content

v0.8.5

Latest

Choose a tag to compare

@mryll mryll released this 15 Oct 21:43

Security

  • The credits balance and the message ranges derived from it no longer reach jq as command-line arguments, where any local user can read them in /proc/<pid>/cmdline. This covers --json, the bar text and the tooltip. They now go in on stdin.
  • The OAuth tokens no longer reach jq through its environment. They go in on stdin or a pipe.

The output is the same as in 0.8.4.

Full Changelog: v0.8.4...v0.8.5