Shaun Arman cf1d5adb83 docs(analysis): document zip-slip safety guarantee in extract_docx_text ... Only a single hardcoded entry (word/document.xml) is ever accessed from the ZIP archive; no arbitrary path extraction occurs, so path traversal attacks cannot apply. Add a comment to make this invariant explicit for future maintainers.		2026-05-31 13:57:38 -05:00
..
.cargo	fix: resolve clippy format-args failures and OpenSSL vendoring issue	2026-04-04 15:05:13 -05:00
capabilities	chore: add MIT license, security hardening, and repo hygiene	2026-04-07 12:50:13 -05:00
gen/schemas	feat: add image attachment support with PII detection	2026-04-08 20:03:34 -05:00
icons	fix: replace empty icon placeholder files with real app icons	2026-03-15 20:31:52 -05:00
resources/ollama	feat(ui): fix model dropdown, auth prefill, PII persistence, theme toggle, and Ollama bundle	2026-04-05 19:30:41 -05:00
src	docs(analysis): document zip-slip safety guarantee in extract_docx_text	2026-05-31 13:57:38 -05:00
build.rs	fix: remove invalid --locked flag from cargo commands and fix format string	2026-04-14 20:50:47 -05:00
Cargo.lock	chore: update Cargo.lock for lopdf, zip, quick-xml deps	2026-05-31 13:51:08 -05:00
Cargo.toml	feat(upload): add safe file extension validation and binary text extraction	2026-05-31 13:50:59 -05:00
tauri.conf.json	fix: bump tauri.conf.json version to 0.3.0	2026-05-23 17:36:38 -05:00