mirror of
https://github.com/OpenSelena/omniget.git
synced 2026-11-04 18:22:43 +00:00
- Enforce strict non-null CSP in tauri.conf.json - Restrict assetProtocol allowlist to appdata, download, and temp directories - Scope shell:allow-open in default capability to https, http, and mailto - Configure --max-old-space-size=4096 in package.json build script to prevent heap OOM - Fix Udemy 0-course fetch fallback logic in udemy_courses.rs - Sanitize cookie headers against CRLF/control char injection in udemy auth.rs - Dynamically resolve Udemy client credentials with env override support - Enforce 0600 file permissions on saved course sessions in hotmart and udemy auth.rs - Format recognizable token identity in hotmart_login_token - Add comprehensive TDD unit test suites in security-config.test.ts and security-logic.test.ts