squassina
5597a5ab80
security: fix command execution and null-termination issues
...
Closes security vulnerabilities and documentation gaps:
1. Remove shell expansion from config-driven exec/exec-once
- Eliminate wordexp() usage in spawn()
- Add split_argv_noexpand() for safe argument parsing
- Change run_exec() and run_exec_once() to use spawn() instead of spawn_shell()
- Prevents shell injection and expansion-based DoS
2. Fix null-termination in chvt_backup_selmon
- Add explicit null-terminator after strncpy() in chvt()
- Prevents out-of-bounds read when used in regex_match()
3. Add regression test
- New test_chvt_backup_selmon unit test to verify null-termination logic
- Integrate tests into meson.build
4. Translate Chinese comments to English
- Update IMPLEMENTATION_SUMMARY.md to remove Chinese text
- Improves accessibility for international contributors
5. Update documentation
- Update REVIEW_FINDINGS.md with English versions of examples
- Remove wordexp include from meson.c headers (no longer needed)
2026-03-01 07:46:06 -03:00
squassina
5d2f052886
Merge branch 'merge-mangowc-STUDY' into merge-mango
2026-03-01 07:30:29 -03:00
DreamMaoMao
9922ed26c7
update readme
2026-03-01 18:13:40 +08:00
DreamMaoMao
8c8d8025c7
Merge pull request #720 from mangowm/revert-685-optional-session-manager
...
Revert "Add nix option to enable/disable adding to session manager"
2026-03-01 18:04:41 +08:00
DreamMaoMao
008cb9726e
Revert "Add nix option to enable/disable adding to session manager"
2026-03-01 18:04:21 +08:00
DreamMaoMao
243848f43e
bump version to 0.12.5
2026-03-01 12:02:57 +08:00
DreamMaoMao
755ffe06af
update website in readme
2026-03-01 11:42:44 +08:00
DreamMaoMao
811610e481
rename mangowc to mangowm
2026-03-01 11:38:17 +08:00
DreamMaoMao
e935af07c1
project: rename guix file
2026-03-01 11:35:51 +08:00
DreamMaoMao
43965a1155
update readme
2026-03-01 11:21:24 +08:00
DreamMaoMao
94380a3e07
Merge pull request #559 from WeraPea/pointer-events-fix
...
fix: pointer events being one event behind
2026-02-28 23:36:57 +08:00
DreamMaoMao
835269f86b
opt: make spawn and spawn_shell log to debug log
2026-02-26 23:22:51 +08:00
DreamMaoMao
43114bbf8d
Merge pull request #713 from noor-latif/fix/nix-update-xcbutilwm-to-libxcb-wm
...
fix(nix): update deprecated xorg package names to top-level
2026-02-26 17:53:06 +08:00
Noor Latif
b338391984
fix(nix): update deprecated xorg package names to top-level
...
xcbutilwm → libxcb-wm
This eliminates the deprecation warnings:
- "The xorg package set has been deprecated, 'xorg.xcbutilwm' has been renamed to 'libxcb-wm'"
Changes:
- nix/default.nix:14: xcbutilwm, → libxcb-wm,
- nix/default.nix:60: xcbutilwm → libxcb-wm
2026-02-26 09:25:25 +00:00
DreamMaoMao
4787402b12
opt: optimize monitorrule check
2026-02-26 13:30:42 +08:00
DreamMaoMao
cbc344ab88
fix: avoid opacity exceeds the threshold due to overshot animation curve
2026-02-26 08:29:27 +08:00
DreamMaoMao
1dac96b426
bump version to 0.12.4
2026-02-25 21:53:35 +08:00
DreamMaoMao
6667708d9a
feat: monitor arg support multi spec match in disptach
2026-02-25 19:16:06 +08:00
DreamMaoMao
43d0f0f54a
opt: remove useless code
2026-02-25 17:35:19 +08:00
DreamMaoMao
bc5cf2c7d7
opt: remove useless code
2026-02-25 17:25:05 +08:00
DreamMaoMao
c344dfe7a2
Merge pull request #709 from qaqland/clean-rendermon
...
opt: remove unused variable in function rendermon
2026-02-25 17:23:31 +08:00
qaqland
e1c038ae08
opt: remove unused variable in function rendermon
...
Signed-off-by: qaqland <anguoli@uniontech.com>
2026-02-25 16:58:18 +08:00
DreamMaoMao
6894a36019
opt: remove some portal file comment
2026-02-25 15:24:11 +08:00
DreamMaoMao
5412bbe3b6
Merge pull request #685 from jtliang24/optional-session-manager
...
Add nix option to enable/disable adding to session manager
2026-02-25 15:23:54 +08:00
DreamMaoMao
564df864bf
fix: popup position constrain not work for some app
2026-02-25 15:23:54 +08:00
DreamMaoMao
a28647585f
feat: set dbus env auto
2026-02-24 21:40:26 +08:00
Jiatao Liang
2f630c950e
optional-session-manager
2026-02-23 22:59:31 -05:00
DreamMaoMao
f8fa7a856c
opt: optimize frame skip logic
2026-02-23 08:01:45 +08:00
DreamMaoMao
6b2d694b23
update readme
2026-02-22 11:51:28 +08:00
DreamMaoMao
cad564ba56
Merge pull request #684 from Baba-Is-Win/patch-1
...
include tgmix in README.md
2026-02-22 09:51:02 +08:00
Mujk
ee8a7b5961
docs: fix guix installation instructions
...
- Rename GuixSD to Guix System (the distro was renamed in 2019)
2026-02-22 09:49:13 +08:00
DreamMaoMao
d1fd128981
fix: auto set monitor coordinate when no match monitor rule
2026-02-21 18:55:33 +08:00
DreamMaoMao
3d680523d6
opt: if app open when no monitor, init tags and size in updatemons
2026-02-21 17:01:16 +08:00
DreamMaoMao
07aed60245
opt: improve some risk judgments
2026-02-21 16:37:37 +08:00
Ricardo Squassina Lee
466c84e29d
Add warning about repository usage
2026-02-20 21:20:04 -03:00
Baba
4620bc691f
Merge branch 'DreamMaoMao:main' into patch-1
2026-02-20 08:52:41 -06:00
Ricardo Squassina Lee
d4408605c0
Merge branch 'DreamMaoMao:main' into main
2026-02-20 06:56:34 -03:00
DreamMaoMao
722f9f6876
Merge pull request #683 from realcharmer/packaging
...
Include packaging status in README
2026-02-20 09:09:16 +08:00
Baba
595f9e3432
include tgmix in README.md
2026-02-19 14:24:56 -06:00
Emil Miler
f0259c6285
Include packaging status in README
2026-02-19 15:02:03 +01:00
Ricardo Squassina Lee
42b0353e02
Merge branch 'DreamMaoMao:main' into main
2026-02-19 10:44:04 -03:00
Ricardo Squassina Lee
50f339d898
Merge pull request #10 from squassina/copilot/review-latest-changes-security-performance-clarity
...
Implement code review recommendations: security hardening, i18n, and technical debt tracking
2026-02-19 10:43:26 -03:00
copilot-swe-agent[bot]
8a7fa8dce2
Fix markdown linting errors in documentation files
...
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 13:35:16 +00:00
DreamMaoMao
2f12f46919
opt: use base surface of client when xytonode in rect node
2026-02-19 19:07:44 +08:00
copilot-swe-agent[bot]
d344ab8a17
Add implementation summary and mark recommendations as completed
...
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 10:54:31 +00:00
copilot-swe-agent[bot]
d97ec4a55a
Implement 3 code review recommendations: security fix, translations, and technical debt tracking
...
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 10:53:04 +00:00
copilot-swe-agent[bot]
42e9187cf4
Add comprehensive code review findings document
...
Co-authored-by: squassina <8495707+squassina@users.noreply.github.com>
2026-02-19 10:36:13 +00:00
copilot-swe-agent[bot]
afdcae7cf5
Initial plan
2026-02-19 10:31:22 +00:00
Ricardo Squassina Lee
1341f843e9
Merge branch 'DreamMaoMao:main' into main
2026-02-19 07:07:50 -03:00
DreamMaoMao
68075c0044
feat: support index arg in switch_keyboard_layout
2026-02-19 11:23:08 +08:00