gstack/design
Garry Tan 8697ffa09b
fix(security): restrict session file permissions to owner-only
Design session files written to /tmp with default umask (0644) were
world-readable on shared systems. Sessions contain design prompts and
feedback history.

Set mode 0o600 (owner read/write only) on both create and update paths.

Closes #859

Co-Authored-By: Gus <garagon@users.noreply.github.com>
2026-04-13 09:34:27 -07:00
..
src fix(security): restrict session file permissions to owner-only 2026-04-13 09:34:27 -07:00
test fix: community security wave — 8 PRs, 4 contributors (v0.15.13.0) (#847) 2026-04-06 00:47:04 -07:00
prototype.ts feat: design binary — real UI mockup generation for gstack skills (v0.13.0.0) (#551) 2026-03-27 20:32:59 -06:00