nevaforget 8aca2bf331 fix: audit fixes — symlink-safe avatars, blur downscale + padding, config validation (v0.8.0) ...

- Replace canonicalize() with symlink_metadata + is_file + !is_symlink for avatar
  lookup (prevents symlink traversal to arbitrary files)
- Fix blur padding offset from (0,0) to (-pad,-pad) to prevent edge darkening
- Add MAX_BLUR_DIMENSION (1920px) downscale before GPU blur
- Validate blur per config source (invalid user value preserves system default)
- Wallpaper: use symlink_metadata + is_file + !is_symlink in resolve_background_path

2026-03-30 16:08:50 +02:00

..

config.rs

fix: audit fixes — symlink-safe avatars, blur downscale + padding, config validation (v0.8.0)

2026-03-30 16:08:50 +02:00

i18n.rs

fix: address audit findings — polling, symlinks, validation, wallpaper removal (v0.7.0)

2026-03-28 23:09:29 +01:00

main.rs

fix: elevate CSS priority to override GTK4 user theme (v0.7.2)

2026-03-29 14:23:33 +02:00

panel.rs

fix: audit fixes — symlink-safe avatars, blur downscale + padding, config validation (v0.8.0)

2026-03-30 16:08:50 +02:00

power.rs

fix: use systemctl for reboot/shutdown — loginctl lacks these verbs (v0.7.3)

2026-03-29 18:59:00 +02:00

users.rs

fix: audit fixes — symlink-safe avatars, blur downscale + padding, config validation (v0.8.0)

2026-03-30 16:08:50 +02:00