fix(desktop): fix 11 security findings from a deepsec scan of the desktop app - #6065

Merged

waleedlatif1 merged 16 commits into

stagingfrom

worktree-deepsec-desktop

Jul 29, 2026

Commits on Jul 29, 2026

fix(desktop): gate terminal writes and user activation on real OS input
waleedlatif1
committed
fix(desktop): reclaim tmux run temp directories that outlive their wait window
waleedlatif1
committed
fix(desktop): contain sign-in handoff failures when no window is available
waleedlatif1
committed
fix(desktop): validate manual-update download urls against the scheme allowlist
waleedlatif1
committed
fix(desktop): scope credential presence grants to the operation proven
waleedlatif1
committed
fix(desktop): DNS-check agent subresources that are readable or execute
waleedlatif1
committed
fix(desktop): close three credential-disclosure gaps in agent page functions
waleedlatif1
committed
fix(desktop): hand the panel occlusion frame only to a user-driven renderer
waleedlatif1
committed
fix(desktop): act on adversarial review of the security fixes
waleedlatif1
committed
refactor(security): one DNS resolver for every SSRF guard, checking all addresses
waleedlatif1
committed
fix(security): filter refused DNS records instead of failing the host
waleedlatif1
committed
fix(desktop): invert the terminal-write gate, and finish the XHTML normalization
waleedlatif1
committed
refactor(desktop): simplify what the security fixes added
waleedlatif1
committed
docs(desktop): correct comments that no longer match the code
waleedlatif1
committed
fix(desktop): stop a command riding inside a fake PTY reply, and fail closed in XHTML
waleedlatif1
committed
fix(desktop): paste from main, and stop a reclaimed run dir printing into tmux
waleedlatif1
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(desktop): fix 11 security findings from a deepsec scan of the desktop app - #6065

fix(desktop): fix 11 security findings from a deepsec scan of the desktop app#6065
waleedlatif1 merged 16 commits into
stagingfrom
worktree-deepsec-desktop

Commits on Jul 29, 2026

fix(desktop): gate terminal writes and user activation on real OS input

fix(desktop): reclaim tmux run temp directories that outlive their wait window

fix(desktop): contain sign-in handoff failures when no window is available

fix(desktop): validate manual-update download urls against the scheme allowlist

fix(desktop): scope credential presence grants to the operation proven

fix(desktop): DNS-check agent subresources that are readable or execute

fix(desktop): close three credential-disclosure gaps in agent page functions

fix(desktop): hand the panel occlusion frame only to a user-driven renderer

fix(desktop): act on adversarial review of the security fixes

refactor(security): one DNS resolver for every SSRF guard, checking all addresses

fix(security): filter refused DNS records instead of failing the host

fix(desktop): invert the terminal-write gate, and finish the XHTML normalization

refactor(desktop): simplify what the security fixes added

docs(desktop): correct comments that no longer match the code

fix(desktop): stop a command riding inside a fake PTY reply, and fail closed in XHTML

fix(desktop): paste from main, and stop a reclaimed run dir printing into tmux