feat(config): validate clients and scope security

2026-09-14 01:07:46 +02:00
parent 5b0c623a8d
commit a3cee2756c
17 changed files with 230 additions and 437 deletions
@@ -0,0 +1,6 @@
+# File and process security
+
+* Validate filenames, content, sizes, and paths; prevent traversal, zip-slip, and unsafe symbolic-link use.
+* Restrict access to intended directories and do not execute uploaded or untrusted files.
+* Do not concatenate untrusted input into shell commands; prefer direct APIs and validate process arguments when execution is required.
+* Treat local files, IPC, and deserialized input as untrusted at relevant boundaries.