Repository navigation
Panel Notes v0.1.2
Superseded by v0.1.4. The latest release includes the clipboard fix, immutable CI action references, and a cleanup-test correction.
This security fix prevents a malicious or malfunctioning clipboard owner from making the notes service buffer unlimited data during image paste.
- Clipboard MIME lists are capped at 16 KiB and images at 25 MiB while reading. Overflow and timeout stop the subprocess group; incomplete images are never imported.
- External context-provider responses receive the same protection at their existing 128 KiB limit. Snapshot file reads are also bounded.
- Added regression coverage for endless producers, child-process cleanup, stderr flooding, boundary sizes, normal image formats, and continued note saving after a rejected paste.
Validation: 43 Python tests, Markdown checks, QML lint, and Omarchy package validation passed locally.
Update
Wait for Saved and close notes, then run:
omarchy plugin update rblalock.panel-notes
omarchy restart shellNotes, images, tabs, and shortcuts are preserved. New installations use:
omarchy plugin add https://github.com/rblalock/omarchy-panel-notes.git --enable