selfpost

Files

T

mix e93a277ee7 security: phase D pre-release review — pass; harden saslpasswd2 argv

Fable review of the full diff from the v1.0 audit (Phase 11, 65a420d) to
HEAD plus a complete pass over the docs/security.md checklist (former spec
7.6). No exploitable findings. One defence-in-depth fix: the application
login is passed to saslpasswd2 behind a -- end-of-options marker so a
login starting with - can never be parsed as a flag. Accepted risks
unchanged; plan § D closed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-06 13:32:52 +03:00

password.go

Phase 4: applications + SASL (sasldb2) + sender_login_maps

2026-07-12 21:18:10 +03:00

sasl_test.go

security: phase D pre-release review — pass; harden saslpasswd2 argv

2026-08-06 13:32:52 +03:00

sasl.go

security: phase D pre-release review — pass; harden saslpasswd2 argv

2026-08-06 13:32:52 +03:00

service_test.go

Phase 9: full backup/restore + domain export/import (spec 7.5, 11.6)