Andy Dixon aac986d78b fix: bound VNC server-announced sizes and only open http(s) links from network data ...

- The VNC client refuses desktop sizes over 64 Mpx (ServerInit and
  DesktopSize/ExtendedDesktopSize) and ZRLE rectangles over 64 MiB before
  allocating, so a hostile server can't force a multi-gigabyte allocation.
- Release URLs from the update manifest and repository URLs from the GitHub
  API are handed to the system opener only when they are http(s) links.

2026-10-12 07:23:40 +01:00

..

examples

Screenshot automation (--connect repeatable, --do, --answer, --shot-delay), SFTP Browser palette entry, centred dialogs, IRC opens the first joined room; demo_data example

2026-10-11 19:41:30 +01:00

migrations

rust: nexus-core storage, vault, keychain, export/import, data-dir migration

2026-10-11 16:05:13 +01:00

src

fix: bound VNC server-announced sizes and only open http(s) links from network data

2026-10-12 07:23:40 +01:00

tests

Remove the Go backend, JS frontend, Wails config and old build scripts; release.sh now wraps rust/release.sh

2026-10-11 17:43:55 +01:00

Cargo.toml

fix: purge keychain credentials on profile delete, atomic owner-only secret writes, zeroize derived keys

2026-10-12 07:20:11 +01:00