1c306916aa
Some checks failed
Security / Security check (push) Failing after 1s
`hub_auth_token.dart` write() previously did
await f.writeAsString(token); // file is now 0644 (umask)
await Process.run('chmod', ['600', f.path]);
which leaves a TOCTOU window where the file is world-readable
between the writeAsString and the chmod call. On a multi-user
host another user could read the bearer token during that
window.
New flow:
await tmp.writeAsString(token); // .tmp file
await chmod(600, tmp.path); // restrict mode FIRST
await tmp.rename(f.path); // atomic POSIX rename
The destination is never visible with permissive perms. Also
sets `~/.fai/` itself to 0700 on Unix on first creation so
other users on a shared host can't enumerate the directory.
dart analyze clean; flutter test green (12 tests).
Bumped pubspec to 0.49.1.
Signed-off-by: flemming-it <stefan.a.flemming@googlemail.com>
51 lines
1.5 KiB
YAML
51 lines
1.5 KiB
YAML
name: fai_studio
|
|
description: "F∆I Studio — desktop GUI for the F∆I hub"
|
|
publish_to: 'none'
|
|
version: 0.49.1
|
|
|
|
environment:
|
|
sdk: ^3.11.0-200.1.beta
|
|
|
|
dependencies:
|
|
flutter:
|
|
sdk: flutter
|
|
flutter_localizations:
|
|
sdk: flutter
|
|
cupertino_icons: ^1.0.8
|
|
intl: any
|
|
|
|
# Sibling package; will move to Forgejo path once published.
|
|
fai_client_sdk:
|
|
path: ../fai_client_sdk_dart
|
|
google_fonts: ^8.1.0
|
|
shared_preferences: ^2.5.5
|
|
# Inline README rendering inside the Store detail sheet.
|
|
# `flutter_markdown` is discontinued; `flutter_markdown_plus`
|
|
# is the actively-maintained drop-in fork (same
|
|
# `MarkdownStyleSheet` / `Markdown` / `MarkdownBody` API).
|
|
flutter_markdown_plus: ^1.0.3
|
|
# Today-Hero pipeline reads accepted stories from
|
|
# ~/.fai/today/active.yaml — see docs/today-pipeline.md.
|
|
yaml: ^3.1.2
|
|
path: ^1.9.0
|
|
# System-native file picker — used by the Flows run-flow
|
|
# form for `bytes`-shaped inputs (extract takes a PDF, the
|
|
# operator clicks "Choose file" and macOS / Linux / Windows
|
|
# routes through the OS dialog so sandboxed Studio still
|
|
# gets read access to the chosen file).
|
|
file_picker: ^11.0.0
|
|
|
|
dev_dependencies:
|
|
flutter_test:
|
|
sdk: flutter
|
|
flutter_lints: ^6.0.0
|
|
|
|
flutter:
|
|
uses-material-design: true
|
|
generate: true
|
|
# Bundled operator-facing documentation rendered inline by
|
|
# the Welcome page. Each doc has a `_de.md` sibling for the
|
|
# German locale; the loader picks the right pair at runtime.
|
|
# Air-gap-friendly — no network calls to read these.
|
|
assets:
|
|
- assets/docs/
|