fix(desktop): fix 11 security findings from a deepsec scan of the desktop app - #6065

Merged

waleedlatif1 merged 16 commits into

stagingfrom

worktree-deepsec-desktop

Jul 29, 2026

Commits on Jul 29, 2026

fix(desktop): gate terminal writes and user activation on real OS input
waleedlatif1
committed
a99223d
fix(desktop): reclaim tmux run temp directories that outlive their wait window
waleedlatif1
committed
b0fe9d4
fix(desktop): contain sign-in handoff failures when no window is available
waleedlatif1
committed
b2cefe2
fix(desktop): validate manual-update download urls against the scheme allowlist
waleedlatif1
committed
09b40cb
fix(desktop): scope credential presence grants to the operation proven
waleedlatif1
committed
73570c7
fix(desktop): DNS-check agent subresources that are readable or execute
waleedlatif1
committed
9b8df93
fix(desktop): close three credential-disclosure gaps in agent page functions
waleedlatif1
committed
7782a56
fix(desktop): hand the panel occlusion frame only to a user-driven renderer
waleedlatif1
committed
fc9469f
fix(desktop): act on adversarial review of the security fixes
waleedlatif1
committed
c18f4d3
refactor(security): one DNS resolver for every SSRF guard, checking all addresses
waleedlatif1
committed
042db18
fix(security): filter refused DNS records instead of failing the host
waleedlatif1
committed
a155f93
fix(desktop): invert the terminal-write gate, and finish the XHTML normalization
waleedlatif1
committed
592c067
refactor(desktop): simplify what the security fixes added
waleedlatif1
committed
96346a2
docs(desktop): correct comments that no longer match the code
waleedlatif1
committed
d0a6eb9
fix(desktop): stop a command riding inside a fake PTY reply, and fail closed in XHTML
waleedlatif1
committed
708dbb3
fix(desktop): paste from main, and stop a reclaimed run dir printing into tmux
waleedlatif1
committed
7712e09

Navigation Menu

fix(desktop): fix 11 security findings from a deepsec scan of the desktop app - #6065

fix(desktop): fix 11 security findings from a deepsec scan of the desktop app#6065
waleedlatif1 merged 16 commits into
stagingfrom
worktree-deepsec-desktop

Commits on Jul 29, 2026

fix(desktop): gate terminal writes and user activation on real OS input

fix(desktop): reclaim tmux run temp directories that outlive their wait window

fix(desktop): contain sign-in handoff failures when no window is available

fix(desktop): validate manual-update download urls against the scheme allowlist

fix(desktop): scope credential presence grants to the operation proven

fix(desktop): DNS-check agent subresources that are readable or execute

fix(desktop): close three credential-disclosure gaps in agent page functions

fix(desktop): hand the panel occlusion frame only to a user-driven renderer

fix(desktop): act on adversarial review of the security fixes

refactor(security): one DNS resolver for every SSRF guard, checking all addresses

fix(security): filter refused DNS records instead of failing the host

fix(desktop): invert the terminal-write gate, and finish the XHTML normalization

refactor(desktop): simplify what the security fixes added

docs(desktop): correct comments that no longer match the code

fix(desktop): stop a command riding inside a fake PTY reply, and fail closed in XHTML

fix(desktop): paste from main, and stop a reclaimed run dir printing into tmux