selfpost

Files

T

mix 429f9ad232 security: phase D pre-release review — pass; harden saslpasswd2 argv

Fable review of the full diff from the v1.0 audit (Phase 11, bd64e80) to
HEAD plus a complete pass over the docs/security.md checklist (former spec
7.6). No exploitable findings. One defence-in-depth fix: the application
login is passed to saslpasswd2 behind a -- end-of-options marker so a
login starting with - can never be parsed as a flag. Accepted risks
unchanged; plan § D closed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-06 13:32:52 +03:00

app

security: phase D pre-release review — pass; harden saslpasswd2 argv

2026-08-06 13:32:52 +03:00

backup

Phase 9: full backup/restore + domain export/import (spec 7.5, 11.6)

2026-07-14 22:33:07 +03:00

buildinfo

Phase 0: project scaffold and build pipeline

2026-07-11 14:50:51 +03:00

dnscheck

dnscheck: query recursive resolvers directly, not the system one