fix(security): nine CLI security/hardening fixes — release v0.2.1#61

Merged

stormer78 merged 11 commits into

mainfrom

fix/security-patches-0.2.1

May 24, 2026

Commits on May 24, 2026

fix(security): derive unlock key via Argon2id in non-openpgp import path

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): reject path-traversal characters in profile name

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): redact armored private key block in DIDKeysExportState Debug

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): warn that --unlock-code is visible in the process list

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): restore terminal on panic via panic hook

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): drop exported private-key armor from State after use

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): avoid OOB panic on stale token-list index

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): clear private-key clipboard when leaving export page

gkh_clankerbot_2000
authored and
stormer78
committed
fix(security): clear ConfigImport passphrase Input buffers after dispatch

gkh_clankerbot_2000
authored and
stormer78
committed
style: cargo fmt
stormer78
committed
chore: release v0.2.1
stormer78
committed