Skip to content

security: implement user confirmation dialog for sensitive deep links

bec1ab2
Select commit
Loading
Failed to load commit list.
Closed

feat: implement actor-based hardware backend with resilience loops for recording stability #1816

security: implement user confirmation dialog for sensitive deep links
bec1ab2
Select commit
Loading
Failed to load commit list.
Superagent Security / Security scan required action May 14, 2026 in 11s

PR requires security review

1 security concern(s) detected.

Details

  1. [MEDIUM] Deep links expose screenshot and hardware controls without authentication (apps/desktop/src-tauri/src/deeplink_actions.rs:173)
    Remove screenshot capture and camera/microphone switching from the unauthenticated deep-link surface, or require explicit in-app user confirmation plus an unguessable per-session nonce/capability before executing these actions. Validate requested device identifiers against user-approved devices before applying changes.