security: clamp alpha_num bullet expansion and sanitize filename logging (#1264)

2026-11-02 16:30:36 -06:00 · 2026-10-24 04:40:29 -04:00
parent 1e097e3edd
commit 9641817a15
3 changed files with 7 additions and 6 deletions
@@ -41,8 +41,9 @@ pub fn poll(inbox: &Inbox, app: &mut SlideApp, ctx: &egui::Context) {
            Event::Open(paths) => {
                for p in paths.iter().filter_map(|p| p.to_str()) {
                    if let Err(e) = app.open_path(p) {
-                        log::error!("{p}: {e}");
-                        app.set_status(format!("Couldn't open {p}: {e}"));
+                        let safe_p = p.replace(['\r', '\n'], " ");
+                        log::error!("{safe_p}: {e}");
+                        app.set_status(format!("Couldn't open {safe_p}: {e}"));
                    }
                }
            }