Skip to content

ShiftDrop 1.0.3

Choose a tag to compare

View all tags
@nhaajtt nhaajtt released this 28 Oct 08:59
· 13 commits to master since this release
v1.0.3
c7ce15e

Security hardening after a full review. Updating is recommended.

  • Your own commands refuse file names containing & | < > ^ %, so a file named to look like a second command can't run one.
  • Word, Excel, PowerPoint conversions open documents with macros forced off.
  • HTML / Markdown to PDF prints with no network at all, so a page can't phone home; generated pages block scripts.
  • Shred refuses links and hard-linked files instead of overwriting what they point to.
  • API keys (VirusTotal, Claude, R2) are passed to curl on stdin, never on the command line where other programs could read them.
  • Watched folders only run safe actions unattended (no commands, deletion, encryption or uploads).
  • Wi-Fi sharing drops clients that stop reading.
  • Each window gets only the permissions it needs; stricter content security policy.
  • Add-on and CI downloads are pinned to exact versions.
Assets 5
Loading