nexus

Files

T

Andy Dixon aac986d78b fix: bound VNC server-announced sizes and only open http(s) links from network data

- The VNC client refuses desktop sizes over 64 Mpx (ServerInit and
  DesktopSize/ExtendedDesktopSize) and ZRLE rectangles over 64 MiB before
  allocating, so a hostile server can't force a multi-gigabyte allocation.
- Release URLs from the update manifest and repository URLs from the GitHub
  API are handed to the system opener only when they are http(s) links.

2026-10-12 07:23:40 +01:00

app

fix: bound VNC server-announced sizes and only open http(s) links from network data

2026-10-12 07:23:40 +01:00

core

fix: bound VNC server-announced sizes and only open http(s) links from network data

2026-10-12 07:23:40 +01:00

packaging

rust: packaging (Linux desktop entry, macOS bundle), cargo release script with update manifests, CI

2026-10-11 16:53:19 +01:00

Cargo.lock

fix: purge keychain credentials on profile delete, atomic owner-only secret writes, zeroize derived keys