security: close the privesc chain, harden pkexec, fix two silent failures - #27

Closed

vietanhdev wants to merge 6 commits into

mainfrom

security/xss-and-csp

Commits on Jul 19, 2026

test: launch-test the real packages in clean containers
vietanhdev
committed
9e95659
docs: add a download page and rewrite getting started as a path
vietanhdev
committed
9a4d277
feat(packaging): move the helper out of /usr/local and add AUR/COPR manifests
vietanhdev
committed
9ba5265
security(frontend): escape untrusted strings and set a real CSP
vietanhdev
committed
2ef76c0
security: one safe path for running a script as root
vietanhdev
committed
6675a19
fix: battery thresholds now grantable, and MCP stops stealing the OAuth port
vietanhdev
committed
5165c8b