Dylan M. Taylor f8fbdfbf3f M2.9: harden native file open/save (sec scan findings 15,22,25) ...

- read_file: verify the opened file is regular and cap the bytes actually
  taken at the 2 GB limit — a workbook-named symlink to an endless device
  reported length 0 but streamed forever (finding 22).
- write_file: create the temporary file exclusively, so a planted file or
  symlink at the predictable `book.xlsx.sctmp` path makes the save fail
  instead of truncating the link's target (finding 25).
- write_file: inherit the destination's permissions, so saving an
  owner-only workbook doesn't become world-readable through the rename
  (finding 15); new files note restrictive defaults.

Tests: exclusive temp creation vs planted symlink, permissions preserved,
directory refused on open. Engine: 460 tests pass; clippy clean.

2026-10-24 05:20:07 -04:00

..

examples

fix: satisfy stricter clippy lints CI's newer stable toolchain catches

2026-10-12 02:52:07 +02:00

src

M2.9: harden native file open/save (sec scan findings 15,22,25)

2026-10-24 05:20:07 -04:00

tests/it

Engine: building blocks for multi-command actions (undo groups, recording buffer, document trust, chunked hidden names) (#462)

2026-10-24 02:06:44 -04:00

Cargo.toml

Engine: file.open decrypts password-protected workbooks (#11)

2026-10-11 23:29:28 +02:00