Commit graph

1449 commits

Author SHA1 Message Date
squassina
5597a5ab80 security: fix command execution and null-termination issues
Closes security vulnerabilities and documentation gaps:

1. Remove shell expansion from config-driven exec/exec-once
   - Eliminate wordexp() usage in spawn()
   - Add split_argv_noexpand() for safe argument parsing
   - Change run_exec() and run_exec_once() to use spawn() instead of spawn_shell()
   - Prevents shell injection and expansion-based DoS

2. Fix null-termination in chvt_backup_selmon
   - Add explicit null-terminator after strncpy() in chvt()
   - Prevents out-of-bounds read when used in regex_match()

3. Add regression test
   - New test_chvt_backup_selmon unit test to verify null-termination logic
   - Integrate tests into meson.build

4. Translate Chinese comments to English
   - Update IMPLEMENTATION_SUMMARY.md to remove Chinese text
   - Improves accessibility for international contributors

5. Update documentation
   - Update REVIEW_FINDINGS.md with English versions of examples
   - Remove wordexp include from meson.c headers (no longer needed)
2026-03-01 07:46:06 -03:00
squassina
5d2f052886 Merge branch 'merge-mangowc-STUDY' into merge-mango 2026-03-01 07:30:29 -03:00
DreamMaoMao
9922ed26c7 update readme 2026-03-01 18:13:40 +08:00
DreamMaoMao
8c8d8025c7
Merge pull request #720 from mangowm/revert-685-optional-session-manager
Revert "Add nix option to enable/disable adding to session manager"
2026-03-01 18:04:41 +08:00
DreamMaoMao
008cb9726e
Revert "Add nix option to enable/disable adding to session manager" 2026-03-01 18:04:21 +08:00
DreamMaoMao
243848f43e bump version to 0.12.5 2026-03-01 12:02:57 +08:00
DreamMaoMao
755ffe06af update website in readme 2026-03-01 11:42:44 +08:00
DreamMaoMao
811610e481 rename mangowc to mangowm 2026-03-01 11:38:17 +08:00
DreamMaoMao
e935af07c1 project: rename guix file 2026-03-01 11:35:51 +08:00
DreamMaoMao
43965a1155 update readme 2026-03-01 11:21:24 +08:00
DreamMaoMao
94380a3e07
Merge pull request #559 from WeraPea/pointer-events-fix
fix: pointer events being one event behind
2026-02-28 23:36:57 +08:00
DreamMaoMao
835269f86b opt: make spawn and spawn_shell log to debug log 2026-02-26 23:22:51 +08:00
DreamMaoMao
43114bbf8d
Merge pull request #713 from noor-latif/fix/nix-update-xcbutilwm-to-libxcb-wm
fix(nix): update deprecated xorg package names to top-level
2026-02-26 17:53:06 +08:00
Noor Latif
b338391984 fix(nix): update deprecated xorg package names to top-level
xcbutilwm → libxcb-wm

This eliminates the deprecation warnings:
- "The xorg package set has been deprecated, 'xorg.xcbutilwm' has been renamed to 'libxcb-wm'"

Changes:
- nix/default.nix:14: xcbutilwm, → libxcb-wm,
- nix/default.nix:60: xcbutilwm → libxcb-wm
2026-02-26 09:25:25 +00:00
DreamMaoMao
4787402b12 opt: optimize monitorrule check 2026-02-26 13:30:42 +08:00
DreamMaoMao
cbc344ab88 fix: avoid opacity exceeds the threshold due to overshot animation curve 2026-02-26 08:29:27 +08:00
DreamMaoMao
1dac96b426 bump version to 0.12.4 2026-02-25 21:53:35 +08:00
DreamMaoMao
6667708d9a feat: monitor arg support multi spec match in disptach 2026-02-25 19:16:06 +08:00
DreamMaoMao
43d0f0f54a opt: remove useless code 2026-02-25 17:35:19 +08:00
DreamMaoMao
bc5cf2c7d7 opt: remove useless code 2026-02-25 17:25:05 +08:00
DreamMaoMao
c344dfe7a2
Merge pull request #709 from qaqland/clean-rendermon
opt: remove unused variable in function rendermon
2026-02-25 17:23:31 +08:00
qaqland
e1c038ae08 opt: remove unused variable in function rendermon
Signed-off-by: qaqland <anguoli@uniontech.com>
2026-02-25 16:58:18 +08:00
DreamMaoMao
6894a36019 opt: remove some portal file comment 2026-02-25 15:24:11 +08:00
DreamMaoMao
5412bbe3b6 Merge pull request #685 from jtliang24/optional-session-manager
Add nix option to enable/disable adding to session manager
2026-02-25 15:23:54 +08:00
DreamMaoMao
564df864bf fix: popup position constrain not work for some app 2026-02-25 15:23:54 +08:00
DreamMaoMao
a28647585f feat: set dbus env auto 2026-02-24 21:40:26 +08:00
Jiatao Liang
2f630c950e optional-session-manager 2026-02-23 22:59:31 -05:00
DreamMaoMao
f8fa7a856c opt: optimize frame skip logic 2026-02-23 08:01:45 +08:00
DreamMaoMao
6b2d694b23 update readme 2026-02-22 11:51:28 +08:00
DreamMaoMao
cad564ba56
Merge pull request #684 from Baba-Is-Win/patch-1
include tgmix in README.md
2026-02-22 09:51:02 +08:00
Mujk
ee8a7b5961 docs: fix guix installation instructions
- Rename GuixSD to Guix System (the distro was renamed in 2019)
2026-02-22 09:49:13 +08:00
DreamMaoMao
d1fd128981 fix: auto set monitor coordinate when no match monitor rule 2026-02-21 18:55:33 +08:00
DreamMaoMao
3d680523d6 opt: if app open when no monitor, init tags and size in updatemons 2026-02-21 17:01:16 +08:00
DreamMaoMao
07aed60245 opt: improve some risk judgments 2026-02-21 16:37:37 +08:00
Ricardo Squassina Lee
466c84e29d
Add warning about repository usage 2026-02-20 21:20:04 -03:00
Baba
4620bc691f
Merge branch 'DreamMaoMao:main' into patch-1 2026-02-20 08:52:41 -06:00
Ricardo Squassina Lee
d4408605c0
Merge branch 'DreamMaoMao:main' into main 2026-02-20 06:56:34 -03:00
DreamMaoMao
722f9f6876
Merge pull request #683 from realcharmer/packaging
Include packaging status in README
2026-02-20 09:09:16 +08:00
Baba
595f9e3432
include tgmix in README.md 2026-02-19 14:24:56 -06:00
Emil Miler
f0259c6285 Include packaging status in README 2026-02-19 15:02:03 +01:00
Ricardo Squassina Lee
42b0353e02
Merge branch 'DreamMaoMao:main' into main 2026-02-19 10:44:04 -03:00
Ricardo Squassina Lee
50f339d898
Merge pull request #10 from squassina/copilot/review-latest-changes-security-performance-clarity
Implement code review recommendations: security hardening, i18n, and technical debt tracking
2026-02-19 10:43:26 -03:00
copilot-swe-agent[bot]
8a7fa8dce2 Fix markdown linting errors in documentation files
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 13:35:16 +00:00
DreamMaoMao
2f12f46919 opt: use base surface of client when xytonode in rect node 2026-02-19 19:07:44 +08:00
copilot-swe-agent[bot]
d344ab8a17 Add implementation summary and mark recommendations as completed
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 10:54:31 +00:00
copilot-swe-agent[bot]
d97ec4a55a Implement 3 code review recommendations: security fix, translations, and technical debt tracking
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 10:53:04 +00:00
copilot-swe-agent[bot]
42e9187cf4 Add comprehensive code review findings document
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 10:36:13 +00:00
copilot-swe-agent[bot]
afdcae7cf5 Initial plan 2026-02-19 10:31:22 +00:00
Ricardo Squassina Lee
1341f843e9
Merge branch 'DreamMaoMao:main' into main 2026-02-19 07:07:50 -03:00
DreamMaoMao
68075c0044 feat: support index arg in switch_keyboard_layout 2026-02-19 11:23:08 +08:00