- The local clipboard was offered to the RDP server every time the
desktop gained focus, so any server could read the last thing copied
(a password, a token) without a paste. It now goes only on Ctrl/Cmd+V
or Paste Clipboard.
- The server-chosen desktop size is checked before DecodedImage
allocates it (65535x65535 is 16 GiB, and allocation failure aborts the
whole app), at connect and on reactivation.
- Drive reads are clamped to 8 MiB per request (the native backend
allocated the server's u32 length up front).
- Print jobs get unique files created exclusively (same-second jobs used
to truncate each other) and at most 4 may be open at once.