Martin BallandClaude Opus 5.5 a9cc06dc0f #3692: Zotero client talks only to this computer and, on Linux, only to our own user ...

Audit finding 21 (CWE-306): run_command handed document callback authority to
whatever accepted the TCP connection. Zotero's protocol is fixed and has no
authentication, so WordCraft now establishes what it can about the peer itself:
- the address must be loopback, refused before connecting (ZoteroError::Refused);
- on Linux/Android, before the command is sent, the kernel socket table
  (/proc/net/tcp, tcp6) must show the listener's end of this connection owned
  by the same UID as ours; another user's listener, or one whose owner can't be
  established, is refused. No unsafe, no new dependencies.
macOS, Windows and the BSDs have no such table without OS calls; there the
loopback rule is the guard. The residual risk is documented in docs/zotero.md.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-25 23:49:08 +00:00

..

brand

#664: brand licence names WordCraft, not DesignCraft (#682)

2026-10-11 22:39:47 -04:00

images

M7/M14: comment balloons in the margin; ROADMAP alpha and parity estimates; README Review and Layout screenshots; cargo xtask alias

2026-10-06 01:38:55 -04:00

architecture.md

M15: Polish interface, and Polish spelling, grammar and hyphenation (#346)

2026-10-12 04:04:03 -04:00

contributors.md

About: contributor and model credits compiled in (grab bag + table, self-submitted names) (#6)

2026-10-07 21:17:02 -04:00

control-protocol.md

#3734: ui.resize refuses sizes that aren't positive and clamps to the GPU's limit (#3920)

2026-10-23 12:03:33 -04:00

egui-037-migration-plan.md

egui037: reconcile WordCraft main and preserve input migration

2026-10-25 03:17:45 +01:00

file-format-parity.md

Gap 9: open AES-encrypted Word files (Standard encryption) (#2628)

2026-10-25 11:48:13 -04:00

gaps.md

Merge current WordCraft main while preserving egui 0.37 migration

2026-10-25 17:30:11 +01:00

hardware-parity.md

#2108: File › Print scales pages to another paper size (#2699)

2026-10-18 11:48:17 -04:00

layout-parity.md

egui-037: reconcile main and protect IME undo and wrapped layout

2026-10-25 16:15:05 +01:00

localization-hu.md

chore(i18n): remove the in-repo catalogs and parser

2026-10-23 22:20:55 +01:00

localization-parity.md

M-EGUI037: reconcile WordCraft main and preserve IME editing

2026-10-25 02:19:38 +02:00

localization-sl.md

chore(i18n): remove the in-repo catalogs and parser

2026-10-23 22:20:55 +01:00

localization-sv.md

chore(i18n): remove the in-repo catalogs and parser

2026-10-23 22:20:55 +01:00

localization-tr.md

chore(i18n): remove the in-repo catalogs and parser

2026-10-23 22:20:55 +01:00

mcp.md

Merge PR #4121: MCP: keep serving when the app isn't open yet (#4078)

2026-10-24 20:38:51 +00:00

parity-checklist.md

Parity checklist: Read Mode 2 of 3 (cargo xtask parity)

2026-10-25 02:43:09 +00:00

recovery.md

CI: one test binary per crate, nextest, line tables only (#4025)

2026-10-23 14:24:37 -04:00

releasing.md

Bump version to 0.5.0; add Linux riscv64 release build (#394)

2026-10-10 19:41:30 -04:00

roadmap.md

M-egui037: reconcile upstream and document migration review fixes

2026-10-25 06:42:20 +01:00

shared-pdf.md

M-EGUI037: reconcile WordCraft main and preserve IME editing

2026-10-25 02:19:38 +02:00

spelling-dictionaries.md

Merge origin/main into spanish-proofing

2026-10-23 19:06:06 -03:00

target-app-parity.md

Merge PR #3056: Insert Table of Figures: a dialog with the caption label (Table, Equation, your own) (#3013)

2026-10-22 01:51:21 +00:00

typing-parity.md

M0: reconcile current-main dialogs and canvas changes with egui 0.37

2026-10-25 17:03:15 +01:00

ui-parity.md

#2982: File ▸ Info Custom Document Properties dialog (#2997)

2026-10-25 11:44:31 -04:00

zotero.md

#3692: Zotero client talks only to this computer and, on Linux, only to our own user

2026-10-25 23:49:08 +00:00