markdown-converter

amitwh/markdown-converter

Fork 0

mirror of https://github.com/amitwh/markdown-converter.git synced 2026-08-24 07:20:16 +05:30

Commit Graph

Author	SHA1	Message	Date
amitwh	4c00406bcd	docs(security): correct BurntToast drop evidence to cover CLI argv path Final-review nit: the hardcoded-list rationale covers the dialog path only; the drop stands on the trusted-argv precedent for --convert-to. Amit Haridas	2026-08-23 19:31:33 +05:30
amitwh	dd6d97c35d	docs(security): formal security assessment summary Manual audit + Task 24 formal pass: SEC-1 Pandoc argument injection (critical, fixed), Git sidebar XSS (high, fixed), File.path dead on Electron 41 (fixed), pdf-lib encryption silent no-op (fixed, honest failure). 14 areas verified clean. 7 deferred/accepted risks documented (D1-D7) incl. real-encryption dependency decision and GUI-pass release blocker. Amit Haridas	2026-08-23 19:31:33 +05:30

Author

SHA1

Message

Date

amitwh

4c00406bcd

docs(security): correct BurntToast drop evidence to cover CLI argv path

Final-review nit: the hardcoded-list rationale covers the dialog path
only; the drop stands on the trusted-argv precedent for --convert-to.

Amit Haridas

2026-08-23 19:31:33 +05:30

amitwh

dd6d97c35d

docs(security): formal security assessment summary

Manual audit + Task 24 formal pass: SEC-1 Pandoc argument injection
(critical, fixed), Git sidebar XSS (high, fixed), File.path dead on
Electron 41 (fixed), pdf-lib encryption silent no-op (fixed, honest
failure). 14 areas verified clean. 7 deferred/accepted risks documented
(D1-D7) incl. real-encryption dependency decision and GUI-pass release
blocker.

Amit Haridas

2026-08-23 19:31:33 +05:30