Andy Dixon
0d0b3a7c75
Session-only credentials (kept for a whole session so reconnects don't re-prompt), credentials pending until a connection succeeds, and the credential prompt's text buffer are now Zeroizing and wiped when dropped, including when a prompt is cancelled or abandoned (SEC-20261012-007, partial). Still open: the values handed to the protocol clients are plain Strings for the duration of authentication, egui keeps its own copies of typed text, and no mlock/PR_SET_DUMPABLE is applied.
29 lines
684 B
TOML
29 lines
684 B
TOML
[package]
|
|
name = "nexus"
|
|
version.workspace = true
|
|
edition.workspace = true
|
|
build = "build.rs"
|
|
|
|
[[bin]]
|
|
name = "nexus-terminal"
|
|
path = "src/main.rs"
|
|
|
|
[dependencies]
|
|
nexus-core = { path = "../core" }
|
|
eframe = { version = "0.36", default-features = false, features = ["default_fonts", "glow", "wayland", "x11", "accesskit", "persistence"] }
|
|
egui = "0.36"
|
|
parking_lot = "0.12"
|
|
zeroize = "1"
|
|
egui-phosphor = "0.14"
|
|
rfd = "0.17"
|
|
image = { version = "0.25", default-features = false, features = ["png"] }
|
|
serde = { version = "1", features = ["derive"] }
|
|
serde_json = "1"
|
|
regex = "1"
|
|
alacritty_terminal = "0.26.0"
|
|
chrono = "0.4.45"
|
|
arboard = "3.6.1"
|
|
|
|
[build-dependencies]
|
|
winresource = "0.1"
|