nexus

Files

T

Andy Dixon 13ca82ab2d fix(storage): transactional migrations, purge legacy plaintext secrets, private DB files, stricter ids and hosts

- Each migration runs in a transaction. Several rebuild the profiles
  table (create, copy, DROP, rename); a crash between the DROP and the
  rename left a database that failed to open on every later launch.
- Migration 009 removes the Go-era proxyPassword/totpSecret keys still
  sitting in old ssh_config JSON, then VACUUMs and checkpoints the WAL so
  the old pages leave the file. secure_delete is on from now on.
- nexus.db (and -wal/-shm) are created and kept 0600.
- Profile ids are limited to [A-Za-z0-9._-]{1,64}: ids name keychain and
  vault entries (profile:<id>:<kind>), so a crafted id containing ':'
  could shadow or purge another profile's credentials on import/sync.
- Hosts reject control characters (NUL got through) and >253 bytes; jump
  hosts and forward destination/bind addresses get the same host check.

2026-10-13 06:55:49 +01:00

.cargo

ci: least-privilege token, SHA-pinned actions, cargo audit job

2026-10-12 09:19:57 +01:00

app

fix(rdp): clipboard only on explicit paste, size check before allocation, bounded device I/O

2026-10-13 06:49:13 +01:00

core

fix(storage): transactional migrations, purge legacy plaintext secrets, private DB files, stricter ids and hosts

2026-10-13 06:55:49 +01:00

fuzz

feat(rdp): RD Gateway transport (experimental)