fix(security): harden credential and path boundaries

Preserve pending pairing tokens until credential-store migration succeeds, defer keychain access until frontend hydration, reject symlink and malformed ownership paths, and restrict metadata credentials to exact origins. Refs #15 Refs #16
2026-08-03 16:08:02 +00:00 · 2026-07-15 08:23:43 +03:30
parent d6af4ee2b5
commit 1da0fa7223
11 changed files with 879 additions and 378 deletions
@@ -1258,7 +1258,7 @@ className="app-button px-3 py-1.5 text-[12px] flex items-center gap-1.5 disabled
                    <p className="text-xs text-text-secondary m-0 mt-0.5">
                      {platform.portable
                        ? 'Your pairing token is stored with this portable Firelink folder and will persist when the folder is moved. Treat the folder as sensitive.'
-                        : 'Your pairing token is persisted in Firelink settings and will persist across restarts.'}
+                        : 'Your pairing token is stored in the system credential store and will persist across restarts.'}
                    </p>
                  </div>
                </div>