Skip to content

Remove folder-open dropper and stop shell-concatenating profile URLs - #5

Merged
Alhwyn merged 1 commit into
masterfrom
security/defensive-hardening
Aug 24, 2026
Merged

Alhwyn merged 1 commit into
masterfrom
security/defensive-hardening

Conversation

@kleosr

@kleosr kleosr commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Delete fake font launcher and disable automatic tasks on folder open.
  • Open LinkedIn/Twitter URLs with execFile and an https host allowlist.

Test plan

  • Open the folder and confirm no font/Node task auto-runs.
  • Confirm profile URL open still works for allowlisted https hosts.

Made with Cursor

…a shell string.

Co-authored-by: Cursor <cursoragent@cursor.com>
@Alhwyn
Alhwyn merged commit 67f3d04 into master Aug 24, 2026
1 check passed
kleosr pushed a commit that referenced this pull request Sep 27, 2026
…ening

Remove folder-open dropper and stop shell-concatenating profile URLs
kleosr pushed a commit that referenced this pull request Sep 28, 2026
…ening

Remove folder-open dropper and stop shell-concatenating profile URLs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants